Identity Engineer – Tier 2

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sparkhound

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1998

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Sparkhound is an IT consulting and managed services firm that helps businesses adopt AI, data analytics, custom application development, and cloud infrastructure to improve operations and drive growth. They offer AI & Data Analytics (including GenAI and LLM preparedness), custom and low-code app development, data integration and warehousing, Microsoft 365 consulting, and managed IT/security services such as managed service desk and data protection. Sparkhound primarily serves enterprise and B2B clients across industries, focusing on digital transformation, automation (RPA), and pragmatic technology-driven business outcomes.

📋 Description

• Perform day-to-day administration and support of client hybrid identity environments spanning on-premises Active Directory and Microsoft Entra ID • Provision and de-provision user and group accounts in on-premises Active Directory with correct OU placement • Execute and maintain established Joiner/Mover/Leaver identity lifecycle automation, validating completion and remediating exceptions • Perform password resets and account unlocks across on-premises AD and synchronized Entra ID identities • Support multifactor authentication enrollment and troubleshoot routine authentication failures • Troubleshoot Group Policy application using approved policies, diagnosing precedence, scope, and replication issues without creating or modifying GPOs • Monitor and triage Entra Connect synchronization errors and sync health alerts, resolving routine issues and escalating configuration-level causes • Assign licenses and perform standard attribute updates within Entra ID • Respond to Severity 2 and 3 identity service disruptions, including sync delays and login failures • Route suspected security incidents to the defined cybersecurity team according to the incident response runbook • Request, use, and release just-in-time privileged access according to client PAM procedures and maintain accurate elevated-activity records • Halt activities reserved for client authorization, including sync configuration and topology changes, GPO/OU/schema modifications, Conditional Access changes, elevated role assignments, PIM/PAM configuration, trust and federation changes, and tenant-level authentication method changes • Maintain accurate documentation and follow change management procedures in client environments • Report to the Director of Operations under the functional oversight of the client's designated identity function owner

🎯 Requirements

• 3–5 years administering Active Directory in a production environment, including account lifecycle, OU and group management, and Group Policy troubleshooting • Hands-on experience with hybrid identity, specifically Entra Connect or Azure AD Connect synchronization, including sync error triage, attribute flow, and understanding how on-premises changes propagate to the cloud • Working knowledge of Microsoft Entra ID administration, including licensing, attribute management, and authentication methods • Practical experience supporting multifactor authentication and Conditional Access from an end-user troubleshooting perspective • Familiarity with Privileged Identity Management and just-in-time access models • Ability to work productively without standing administrative rights • Understanding of identity lifecycle automation and ability to validate and remediate automated provisioning workflows • Ability to distinguish an identity service disruption from a potential identity compromise and escalate the latter immediately • Experience delivering support in a managed services or multi-client environment, including ticket queue discipline, SLA adherence, and change management • PowerShell proficiency for directory administration and reporting • Microsoft certifications such as SC-300 or equivalent demonstrated experience preferred • Ability to handle client and company data with care • Ability to follow information security policies • Ability to complete required security training • Ability to report suspected incidents or policy violations promptly • Ability to maintain accurate documentation and follow change management procedures

🏖️ Benefits

• Required security training • Remote work arrangement