Identity Engineer - Tier 2

The Identity & Access Engineer performs day-to-day administration and support of client hybrid identity environments spanning on-premises Active Directory and Microsoft Entra ID. This role is accountable to the Director of Operations for account lifecycle accuracy, directory synchronization health, and identity-related incident response within defined authorization boundaries, and operates under the functional oversight of the client's designated identity function owner. 

Duties and Responsibilities

• Provision and de-provision user and group accounts in on-premises Active Directory, applying correct OU placement per the client's existing structure
• Execute and maintain established Identity Lifecycle (Joiner/Mover/Leaver) automation, validating that automated actions complete correctly and remediating exceptions
• Perform password resets and account unlocks across on-premises AD and synchronized Entra ID identities
• Support multifactor authentication enrollment and troubleshoot routine authentication failures for end users
• Troubleshoot Group Policy application using existing approved policies, diagnosing precedence, scope, and replication issues without creating or modifying GPOs
• Monitor and triage Entra Connect synchronization errors and sync health alerts, resolving routine issues and escalating configuration-level causes
• Assign licenses and perform standard attribute updates within Entra ID
• Respond to Severity 2 and 3 identity service disruptions including sync delays and login failures, and route suspected security incidents to the defined cybersecurity team per the incident response runbook
• Request, use, and release just-in-time privileged access in accordance with client PAM procedures, maintaining accurate records of elevated activity
• Recognize and halt on activities reserved for client authorization, including sync configuration and topology changes; GPO, OU, or schema modification; Conditional Access policy changes; elevated role assignments; PIM/PAM policy configuration; trust and federation changes; and tenant-level authentication method changes
• Maintain accurate documentation and follow change management procedures without exception in client environments