Position Responsibilities:

• Design, administer, and support enterprise Active Directory environments, including Domain Services, Group Policy, DNS, replication, and Organizational Unit (OU) management
• Manage Microsoft Entra ID (Azure AD) tenant configurations and integrations
• Implement and support modern authentication technologies, including MFA, Passwordless Authentication, Windows Hello for Business, FIDO2 Security Keys, Certificate-Based Authentication, and Single Sign-On (SSO)
• Design and enforce Conditional Access policies
• Support identity security initiatives aligned with cybersecurity standards and Zero Trust principles
• Implement privileged access controls and secure administrative access methodologies
• Ability to work extended hours or weekends as necessary
• Other projects or duties as assigned

Required Education and Experience:

• Bachelor’s Degree and 4 to 6 years working experience in Identity & Access governance, implementations and compliance/audit related function reviewing Identity & Access systems, plus proficiency with designing, supporting, maintaining, and administering Identity and Access technologies such as any of these: IDaaS and single sign-on (SaaS and on-premises), directory services (Active Directory, LDAP, cloud-based directories), user authentication (MFA, passwordless), identity management and governance, privileged identity management, and some understanding PKI and certificates/key management, or High School Diploma/General Education Degree (GED) 7 to 9 plus years of experience in the above stated areas
• Strong knowledge of Identity & Access management and business application security concepts and principles
• Ability to develop and manage Reyes Shared Services budgets and financial analysis to select best options or solutions
• Proficiency or working knowledge of Cyber Security frameworks and methodology such as CIS Benchmarks and/or NIST

Preferred Education and Experience:

• Master’s Degree
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Experience with Okta, CyberArk, SailPoint, NetIQ, Saviynt, or similar IAM solutions.
• Experience with Privileged Identity Management (PIM), PKI, and Certificate Services.
• Experience supporting hybrid cloud and enterprise IAM environments.