Worker Type
Regular
Job Description
Summary
We are seeking an experienced Identity and Systems Administrator / Analyst to support identity and access management, Windows infrastructure, endpoint management, and general systems administration activities.
This position will primarily focus on maintaining and improving identity and access controls, administering Okta, supporting role-based access control, and assisting with Active Directory and Windows Server environments. The environment is primarily Windows-based, with a smaller number of macOS and Linux systems.
The ideal candidate will have hands-on experience with Okta or a strong understanding of identity and access management concepts, including authentication, authorization, application access, group-based access, and role-based access control. Familiarity with Jamf is preferred but not required, and training may be provided.
Automated processes are already in place for user onboarding and offboarding. This role will support, maintain, and troubleshoot the identity systems and access controls surrounding those automated processes rather than manually performing routine account provisioning and deprovisioning.
Position Responsibilities
- Administer and support identity and access management solutions, including Okta.
- Maintain application assignments, access policies, groups, roles, and authentication requirements.
- Configure and support role-based access control based on job responsibilities, business requirements, and least-privilege principles.
- Support single sign-on, multifactor authentication, federation, and application integrations.
- Troubleshoot authentication, authorization, account synchronization, application access, and provisioning-related issues.
- Monitor and support automated identity lifecycle processes, including identifying and resolving workflow, synchronization, or access assignment failures.
- Review identity and access configurations for consistency, security, and compliance.
- Participate in periodic access reviews, entitlement reviews, and audit activities.
- Work with internal teams to identify access requirements and translate those requirements into appropriate roles, groups, and permissions.
- Assist with the administration and maintenance of Active Directory, including users, groups, organizational units, delegation, permissions, and Group Policy.
- Support Windows Server environments and related infrastructure services.
- Administer and troubleshoot file-sharing systems, shared folders, access permissions, and security groups.
- Support a primarily Windows-based endpoint environment, with limited macOS and Linux systems.
- Assist with macOS endpoint management through Jamf when needed.
- Use ticketing systems to document, track, prioritize, and resolve incidents, requests, and problems.
- Create and maintain technical documentation, standard operating procedures, troubleshooting guides, system diagrams, and configuration records.
- Assist with system upgrades, application integrations, testing, automation, and process improvements.
- Support security, compliance, and audit activities related to identity, access, endpoints, and systems administration.
- Collaborate with IT, security, application owners, and other technical teams to resolve issues and improve services.
Basic Qualifications (Required Skills & Experience)
- A degree in information technology, computer science, cybersecurity, or a related field is helpful but not required. Relevant professional experience may be considered in place of formal education.
- Five or more years of relevant experience in identity management, systems administration, IT operations, or a related field.
- Strong understanding of identity and access management principles.
- Experience administering Okta or a comparable identity management platform.
- Understanding of role-based access control, least privilege, group-based access, and access governance concepts.
- Experience supporting single sign-on and multifactor authentication.
- Experience troubleshooting identity synchronization, authentication, authorization, or application access issues.
- Experience with Microsoft Active Directory administration.
- Working knowledge of Windows Server environments.
- Experience managing file-sharing systems, folder permissions, and security groups.
- Familiarity with Windows endpoint administration and support.
- Experience using an IT service management or ticketing system.
- Ability to troubleshoot technical issues and communicate findings clearly.
- Strong technical writing skills and the ability to create clear, accurate documentation.
- Ability to work independently while collaborating effectively with technical and nontechnical teams.
- Strong attention to detail, organization, and follow-through.
Other Qualifications & Desired Competencies
- Industry certifications are valued but are not required. Relevant certifications may include Okta, Microsoft, CompTIA, Jamf, Linux, cybersecurity, or systems administration credentials.
- Experience with Okta application integrations, Universal Directory, Lifecycle Management, Workflows, or access policies.
- Familiarity with Jamf or another Apple device-management platform.
- Experience supporting macOS endpoints in an enterprise environment.
- Basic familiarity with Linux administration or Linux-based systems.
- Experience supporting hybrid identity environments.
- Knowledge of Microsoft Entra ID, Microsoft 365, or similar cloud services.
- Familiarity with PowerShell or other scripting and automation tools.
- Experience supporting automated identity lifecycle or provisioning workflows.
- Understanding of security frameworks, access reviews, audit requirements, and privileged access management.
- Experience working in a regulated, compliance-focused, or security-conscious environment.
- Strong analytical and problem-solving skills.
- Ability to balance security requirements with business and operational needs.
- Willingness to learn new platforms and technologies.
- Ability to manage multiple assignments and priorities.
- Customer-service-oriented approach to technical support.
- Strong written and verbal communication skills.
- Commitment to maintaining confidentiality and protecting sensitive information.
- Ability to identify opportunities for automation, standardization, and process improvement.
Physical Demands
- Ability to work in an office and production environment (Constant)
- Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)
Clearance Level
No Clearance
The salary range for this role is:
$91,000 - $138,750
AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills.
ITAR Requirement:
This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract requirements.
Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown. For more information about our company benefit offerings please visit: .
Principals only need apply. NO agencies please.
