Microsoft Entra Id

Microsoft Entra Id Engineer Jobs

25 jobs found

2d ago

Cybersecurity Engineer Senior, Identity and Automation

Starbucks Seattle, WA

Seattle, WA

2d ago

$127k - $212k/yr Full time Senior Automation Azure Ad / Entra Id

Apply Now

Job Description

Lead security and automation work for identity and gateway integrations that allow AI agents and non-human workloads to access enterprise systems safely.

Responsibilities

Design, implement, and operate secure gateway and Model Context Protocol (MCP) integrations, including the Starbucks MCP Gateway service
Own service configuration, integration lifecycle, and release planning while coordinating with vendors on managed capabilities
Assess security and reliability tradeoffs and validate normal, failure, and recovery scenarios
Build reusable infrastructure-as-code configurations and modules for gateway policies and onboarding
Manage providers, dependencies, and versioning; protect state; use Git with peer review, automated validation, and controlled deployments to reduce drift and support recovery
Use APIs for unsupported workflows while keeping clear configuration ownership
Implement least-privilege, deny-by-default access for workloads and AI agents, including tool-level permissions, credential brokering, and downstream user context
Validate boundaries for authentication, authorization, and policy enforcement
Engineer secure identity integrations for enterprise applications, AI assistants, and agentic tools
Configure application and workload identities, API permissions, consent, and access policies across supported cloud platforms
Preserve appropriate user or workload context while maintaining separation between infrastructure, identity, and application permissions
Build, debug, and maintain PowerShell and API-based automation
Diagnose issues across HTTP, DNS, TLS, certificates, and authentication flows using sign-in and audit evidence to improve reliability and security
Own service reliability through telemetry, monitoring, and runbooks
Troubleshoot integrations, respond to incidents, lead root-cause analysis, and coordinate vendor escalations
Participate in support rotations and planned maintenance as needed
Partner with application owners, Security Architecture, cloud/platform teams, and vendors
Create design documentation and operational handoffs, explaining business and security tradeoffs, and provide constructive code and design reviews
Mentor teammates to improve operational resilience and backup coverage
Maintain primary service ownership and contribute to shared Identity engineering, incident response, and cross-training as needed

Requirements

5+ years of experience in information technology with a focus on cybersecurity, identity, or cloud security engineering
3+ years hands-on experience in identity and access management (IAM), including authentication, authorization, and identity lifecycle management
Experience with cloud identity platforms, enterprise applications, and API-based integrations
Strong understanding of identity standards and technologies: OAuth 2.0, OpenID Connect, SAML, SCIM, MFA, and certificate-based authentication
Experience with scripting, automation, or infrastructure-as-code
Proven ability to assess, mitigate, and respond to cybersecurity risks, vulnerabilities, and access control weaknesses
Demonstrated experience contributing to or mentoring high-performing engineering teams
Excellent written and verbal communication skills to convey complex technical concepts to diverse audiences
Practical OAuth 2.0 and OpenID Connect expertise, including delegated and application access, service principals and managed identities, with experience securing non-human identities and workloads
Experience with Microsoft Azure and Microsoft Entra, including identity, application, and workload security services
Experience with AWS or Google Cloud Platform is preferred
Hands-on production service engineering across design, implementation, testing, monitoring, release management, and operational support, with a record of improving reliability and resolving integration failures
Strong Terraform experience: reusable modules, provider management, state protection, automated validation, and controlled deployment
Strong PowerShell and REST API integration skills, including troubleshooting across HTTP, DNS, TLS, certificates, and authentication flows
Experience with certificate-based authentication and trust chains, including certificate lifecycle management and private-key protection

Technologies

PowerShell
OAuth 2.0, OpenID Connect, SAML, SCIM, MFA
Model Context Protocol (MCP)
Terraform, Git
REST API, HTTP, DNS, TLS, certificates
Microsoft Azure, Microsoft Entra
AWS, Google Cloud Platform
Infrastructure-as-code
Microsoft 365, Teams
GitHub Copilot, Copilot Studio
Power Platform connectors
Python, Go, C#, JavaScript/TypeScript
Active Directory
Privileged access management (PAM)

Benefits

Medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits
Short-term and long-term disability
Paid parental leave
Family expansion reimbursement
Paid vacation from date of hire
Sick time (accrued at 1 hour for every 25 hours worked)
Eight paid holidays
Two personal days per year
401(k) retirement plan with employer match
Discounted company stock program (S.I.P.)
Starbucks equity program (Bean Stock)
Incentivized emergency savings
Financial well-being tools
100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan
Student loan management resources
Access to other educational opportunities
Backup care
DACA reimbursement
Reasonable accommodations for job applicants with disabilities

Preferred Qualifications

Experience securing AI agents, assistants, or agentic applications through identity, authentication, authorization, and credential management
Engineering experience with Copilot Studio, Power Platform connectors, MCP security or identity integrations for Microsoft 365, Teams, and GitHub Copilot
Experience developing automation, integrations, or platform services using Python, Go, C#, JavaScript/TypeScript, or similar languages in addition to PowerShell
Hands-on experience with certificate lifecycle automation and PKI integrations supporting non-human identities and workloads
Experience with Active Directory or privileged access management (PAM) is a plus
Relevant cybersecurity, IAM, cloud, or infrastructure certifications are a plus

Location: Seattle, WA (onsite) | Salary: USD 127,100 - 211,800 per year | Minimum experience: 5 years

View full job page →

6d ago

Senior IT Support Engineer

Church's Texas Chicken Atlanta, GA

Atlanta, GA

6d ago

Full time Senior Azure Ad / Entra Id Computer Skills

Apply Now

Job Description

Senior IT Support Engineer roles at Church's Texas Chicken combine hands-on end-user support with deep technical engineering across endpoints, identity, applications, and security. This onsite position in Atlanta, GA gives you a clear escalation lane for complex problems while you help standardize controls across On-Premises, Cloud, and SaaS environments.

What You’ll Do

Serve as a key technical escalation point for complex issues across a global enterprise environment, applying independent judgment to determine remediation priority and approach. You will balance advanced engineering work (approximately 60–70% of the time) with tiered technical support (approximately 30–40% of the time).

Troubleshoot and remediate issues impacting Microsoft Secure Score pillars: Identity (authentication, Conditional Access), Data (protection in M365 and cloud SaaS), Applications (security and permissions), and Endpoints (Intune compliance).
Engineer and administer Microsoft Purview for data governance, compliance, and information protection, including sensitivity labels, data classification, and policy enforcement.
Enforce IT security policies, endpoint compliance, and Conditional Access controls consistently across On-Premises, Cloud, and SaaS.
Support endpoint protection tools such as Microsoft Defender.
Lead patching, vulnerability remediation, and security initiatives enterprise-wide.
Administer Microsoft Intune for device enrollment, compliance, patching, and application deployment, defining configuration standards and policy settings.
Act as Level 3 escalation for complex escalations and root cause analysis, driving systemic fixes company-wide.
Provide tiered support across Level 1 and Level 2 by diagnosing and resolving hardware, software, system, endpoint, network, and collaboration tool issues for onsite and remote users in hybrid work settings.
Troubleshoot enterprise applications, identity, and connectivity issues.
Manage incidents and service requests using ITSM tools such as ServiceNow and Freshservice, prioritizing by business impact and SLA requirements.
Perform root cause analysis and contribute to problem management initiatives.
Maintain knowledge base articles, SOPs, and technical documentation, ensuring thorough updates and communication throughout escalation stages to support efficient, SLA-driven resolution.
Manage endpoint lifecycle activities including imaging, deployment, upgrades, and support across Windows, macOS, iOS, and Android.
Manage IT asset lifecycle (deployment, tracking, auditing, retirement) using ITSM/asset tools, ensuring accurate inventory and ownership/location tracking.
Configure and support conference room technology such as Microsoft Teams Rooms, video conferencing systems, displays, and AV hardware, and troubleshoot collaboration room issues.
Provide end-user support and training for Microsoft 365, Teams, conferencing tools, and enterprise systems.
Promote security awareness and best practices, including MFA and phishing awareness.
Use AI tools to assist with troubleshooting, ticket triage, and knowledge management.

Required Qualifications

Bachelor’s degree in IT, Computer Science, or related field preferred (or equivalent experience).
5–7 years of IT support experience with progression into L2–L3 responsibilities.
3–5 years in a formal enterprise help desk/service desk environment.
Experience working with vendors and SLA-based support models.
2–3 years supporting hybrid cloud environments.
Experience supporting application integrations and technology rollouts.
Experience with asset lifecycle management and endpoint deployment.
Experience using AI tools to support troubleshooting and IT operations.
ITIL certification or proven hands-on experience applying ITIL frameworks, including incident, problem, and change management within a structured service environment.
Microsoft skills including Microsoft 365, Azure AD / Entra ID, and Intune.
Endpoint support experience across Windows, macOS, iOS, and Android.
Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN, Wi-Fi.
Conference room and AV technology support experience.
Endpoint security experience with Microsoft Defender and Conditional Access.
ITSM tools: ServiceNow, Freshservice, Jira, or similar.
Scripting/automation using PowerShell and/or Python (preferred).
CompTIA A+, CompTIA Network+, or Microsoft Certified (MCP, MD-102, AZ-104) preferred.
Strong written and verbal communication, excellent customer service, and user engagement skills.
Highly organized, able to manage multiple priorities; self-motivated and able to work independently and collaboratively.

Technologies You’ll Work With

Microsoft Secure Score, Microsoft Purview, Microsoft Intune, Microsoft Defender, Microsoft 365, Azure AD, Entra ID, Conditional Access, On-Premises, Cloud, SaaS.
Microsoft Copilot and AI-driven platforms, AI-enabled support approaches.
ITSM/asset tools including ServiceNow, Freshservice, and Jira.
PowerShell, Python, and networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN, Wi-Fi.
Microsoft Teams Rooms, Windows, macOS, iOS, Android.
ITIL.

Physical Requirements

Capable of fulfilling essential job duties, with or without reasonable accommodation.
Must be able to lift, install, and provide support for IT and AV equipment as necessary.

View full job page →

6d ago

AI Data Engineer

InterMed, P.A. South Portland, ME

South Portland, ME

6d ago

$105k - $153k/yr Full time Backend Developer Analytics Artificial Intelligence

Apply Now

Job Description

InterMed, P.A. is seeking an AI Data Engineer to help build the data foundation and AI-enabled applications that automate business and clinical workflows while improving decision-making. This role is focused on developing a Microsoft Fabric and Power BI data platform and supporting LLM and AI-assisted tooling, with healthcare data use handled under HIPAA/PHI safeguards.

Based in South Portland, ME (onsite), the engineer will support migrations from legacy on-premises SQL/SSIS workflows into modern lakehouse patterns, while also delivering governed semantic models, data pipelines, and automation that connect sources to end users and AI agents.

What you’ll do

Assist with migrating BI workloads from on-premises SQL and SSIS to Microsoft Fabric, including assessing which legacy packages to retire, rebuild, or re-architect, and maintaining existing SQL Server and SSIS workflows for continuity of reporting during transition
Design and build data pipelines into Fabric OneLake from source systems (for example, eClinicalWorks, payer and ACO files), including orchestration, scheduling, dependency management, alerting, and failure recovery
Complete data warehouse build-out across priority subject areas using a SQL-based transformation framework (for example, dbt) to create modular, tested, version-controlled, and documented data models
Build and publish certified Power BI semantic models with governed measures, definitions, and business-friendly descriptions that support Copilot report building and self-service data agents, including support for transitioning reporting from Tableau to Power BI
Build and maintain Python automation scripts and APIs that support data pipelines, applications, and agents
Ensure data quality, integrity, and security controls across the platform, including HIPAA/PHI safeguards and automated monitoring and alerting on key data quality metrics
Evaluate and integrate LLM-powered tooling (for example, Claude, Copilot, or equivalent) to accelerate data workflows and enable natural-language data access
Establish team standards for responsible AI-assisted development, including using AI tools to write, review, test, and document code and queries with human review of generated output
Use AI to optimize dashboard builds and capabilities for end user agents and self-service analytics
Design, build, and deploy purpose-built applications and AI agents that automate BI, IT, other administrative, and clinical workflows end to end, from data intake through action and an audit trail
Develop custom apps and agents using low-code tools within the Microsoft ecosystem (for example, Power Apps, Power Automate, and Fabric data agents) and Python- and LLM-based custom agents for multi-step workflows where low-code tools fall short
Leverage EMR and other data sources, including structured fields, clinical documentation, and other unstructured sources, to support analytics and automation use cases in compliance with HIPAA/PHI safeguards
Partner with IT on integration, deployment, and ongoing operation of applications and agents
Advise IT and business partners on AI vendor point solutions by assessing fit, overlap with in-house capabilities, data access and integration needs, and build-versus-buy tradeoffs
Develop analyst capability in Python, flexible coding, unstructured data techniques, and AI-assisted development through coaching, code review, and shared patterns and templates
Maintain strict confidentiality aligned with HIPAA guidelines and InterMed policies
Perform other duties that support the mission, vision, and values of InterMed

What you bring

Bachelor’s degree in Computer Science, Information Systems, or a related field; or equivalent combination of education and experience
3-5 years of hands-on experience with AI, data engineering, BI development, or data architecture, with demonstrated ownership of production pipelines and infrastructure
Proficiency in Python for data engineering, including transformation, automation, pipeline development, and data quality scripts
Advanced SQL skills with hands-on experience in SQL Server and SSMS-based environments preferred
Hands-on, daily experience using AI coding assistants and AI tools (for example, Claude Code, GitHub Copilot, or similar) to write, test, debug, and document code and queries
Familiarity with Microsoft Fabric, Azure data services, Snowflake or a comparable cloud platform, and integration within a broader Microsoft environment
Deep understanding of end-to-end data workflows from source system to consumption layer
Demonstrated experience delivering at least one production application, automation, or AI agent that replaced a manual business process
Experience with version control, CI/CD workflows, and code review practices for data assets
Ability to design, document, and govern enterprise data models and architecture

Technologies you’ll work with

Microsoft Fabric, Power BI, Microsoft Copilot, Claude, Claude Code, GitHub Copilot
SQL, SQL Server, SSMS, SSIS, OneLake, Power BI semantic models, Copilot report building
Power Apps, Power Automate, Fabric data agents, dbt, Python, LLM APIs, JSON
EMR, Tableau, Azure data services, Snowflake, Microsoft Entra ID, Microsoft 365

Compensation: USD 105,372 - 152,880 per year.

View full job page →

8d ago

IT Support Engineer - II

LogixCare, LLC Doral, FL

Doral, FL

8d ago

$23+/hr Full time Azure Active Directory Azure Ad / Entra Id Connectwise

Apply Now

Job Description

LogixCare, LLC is hiring an IT Support Engineer to support clients onsite in Doral, FL as a Level 1/2 Help Desk engineer. In this in-office role, you will act as the first line of support, using ConnectWise to manage tickets, address Microsoft 365 and endpoint issues, and keep clients informed while problems move toward resolution.

The position also includes a mentorship component, aimed at building your capability toward more advanced Level 2/3 responsibilities over time.

What you’ll do

Own first response and resolution for Help Desk tickets across the priority queue (P1–P4), ensuring clients are updated and tickets keep moving
Provide day-to-day support for Microsoft 365, including password resets, account unlocks, and mailbox plus Teams/OneDrive access issues
Complete basic Entra ID and Intune tasks as part of routine support work
Triage and resolve Windows workstation, printer, and general hardware issues, and escalate items outside your scope with clear notes
Support new-user onboarding and offboarding, including account provisioning, device setup, and access changes
Document every ticket in ConnectWise so the next person is not starting from scratch
Identify recurring issues or clients at risk that show up in the queue and alert the team rather than simply closing tickets

Required experience and skills

1–2+ years of hands-on IT support or help desk experience (MSP experience is a plus, not required)
Working knowledge of Windows desktop administration and Microsoft 365, including Exchange Online and Entra ID/Azure AD basics
Comfort troubleshooting networking fundamentals such as DNS, DHCP, VPN, and basic connectivity issues
Strong customer service instincts, with clear communication, patience, and the ability to explain technical issues in plain language
Ability to work in-office, full-time, in South Florida

Helpful (nice to have)

Experience with ConnectWise Manage/PSA or a similar ticketing platform
Familiarity with Intune, Entra ID Conditional Access, or endpoint management
Exposure to backup/BCDR tools (for example, Acronis) or basic server administration
CompTIA A+ or Network+, or a Microsoft fundamentals certification such as MS-900 or MD-102

Technologies you’ll work with

ConnectWise
Microsoft 365 including Exchange Online
Entra ID, Azure AD, and Intune
Teams, OneDrive
Windows desktop administration
DNS, DHCP, VPN

Compensation and work location

Salary: $23.00 per hour (from $23.00 per hour)
Work location: In person
Location: Doral, FL (onsite)

Experience levels (as provided)

Microsoft Windows Server: 1 year (preferred)
Desktop support: 2 years (preferred)
Microsoft Outlook: 1 year (preferred)

View full job page →

18d ago

Enterprise Systems & AI Engineer

Innovative Labs Springville, UT

Springville, UT

18d ago

Full time Artificial Intelligence Azure Azure Data Factory

Apply Now

Job Description

Innovative Labs is seeking an Enterprise Systems & AI Engineer (onsite in Springville, UT) to lead enterprise infrastructure, ERP administration, integrations, and AI adoption across manufacturing operations.

Responsibilities

Own the Microsoft Azure environment, including Azure SQL, virtual machines, networking, storage, Azure Data Factory, and identity and cost management
Administer Microsoft 365 and Entra ID / Active Directory, managing accounts, groups, access control, conditional access, and SSO
Administer the VMware environment and maintain on-prem and cloud servers (Windows and Linux) supporting internal applications, including patching, backups, monitoring, and disaster recovery
Apply security best practices such as least-privilege access, secrets management, MFA, logging, and regular access reviews
Own the company’s AI platform and tools, and drive how AI is adopted and used across every department
Use AI assistants and agents as everyday working tools to build, troubleshoot, document, and support systems faster (examples include Claude, Microsoft Copilot, and Azure OpenAI)
Connect systems engineering and AI by using AI to improve system and integration workflows, while applying testing, security, and monitoring to AI tools like other systems
Identify and deliver automation opportunities across operations and the back office
Stay current as AI evolves by tracking new models, tools, and practices
Continue building AI skills and help colleagues use AI effectively
Use AI responsibly by helping set practical rules for company AI use, including appropriate controls around company data
Act as the main technical administrator for the ERP, covering configuration, user security, upgrades, database health, and the reporting replica
Administer SaaS and specialized platforms, including Monday.com, LIMS, QMS, MES, and production-performance (OEE) systems, plus additional tools as they are added
Serve as the escalation point for system issues: diagnose problems across systems, coordinate vendor fixes, and manage vendor relationships and contracts
Evaluate new software, lead implementations and upgrades, and retire systems that are no longer needed
Design, build, and support integrations between satellite systems and the ERP using REST APIs, Azure Data Factory, Databricks, SQL, and scripting
Own data pipelines that keep production, inventory, quality, and financial data in sync, with monitoring and alerts to catch failures early
Write and maintain SQL, Python, and PHP for integrations, reports, and internal web tools
Keep integration and development documentation clear
Partner with department leaders to deliver solutions by configuring existing systems, building integrations, or designing tools on the internal web platform
Support validation, change control, and audit requirements for systems holding quality and compliance data
Maintain current system documentation, runbooks, and the system and integration inventory

Requirements

Bachelor’s degree in Information Systems, Computer Science, Engineering, or a related field (or equivalent professional experience)
10+ years in IT systems engineering, enterprise systems administration, or a similar role, including at least 5 years hands-on with cloud infrastructure
Strong Microsoft Azure experience: Azure SQL, VMs, networking, identity (Entra ID), and Azure Data Factory (or comparable integration and data pipeline tooling)
Experience administering an ERP system, ideally in a manufacturing or distribution environment
Track record building and supporting integrations using REST APIs, SQL, and at least one scripting language (Python, PowerShell, or similar)
Strong SQL skills, including query writing, performance tuning, and database troubleshooting (Microsoft SQL Server / Azure SQL preferred)
Working knowledge of VMware, Active Directory, Microsoft 365, Windows Server, and Linux administration
Sound security habits including access control, secrets handling, backups, and incident response
Clear communication with non-technical users and leaders, including ability to explain trade-offs in plain language
Judgment to work independently and own outcomes as a senior member of a small team
Curiosity and adaptability with a habit of learning new technology quickly, including interest in using AI to change how work gets done

Technologies

Microsoft Azure, Azure SQL, Azure Data Factory
Microsoft 365, Entra ID, Active Directory, SSO, MFA
VMware, Windows, Linux
ERP, Monday.com, LIMS, QMS, MES, OEE
REST APIs, Databricks, SQL, Python, PHP
Claude, Microsoft Copilot, Azure OpenAI

Benefits

Comprehensive health, dental, and vision coverage, plus a few weeks of paid parental leave when needed
Paid time off and holidays
401(k) retirement plan with company contributions

Preferred Qualifications

Experience in an FDA-regulated or cGMP manufacturing environment, including computer system validation and audit support
Hands-on experience with LIMS, QMS, MES, or OEE platforms (example: Redzone)
Experience with Databricks, Snowflake, or other modern data platforms
Web development experience (PHP, JavaScript) for internal tools and dashboards
Hands-on experience with AI coding assistants, AI agents, or large language model APIs
Experience with Git and CI/CD

View full job page →

19d ago

Desktop Support Engineer I

Specialty Appliances LLC Cumming, GA

Cumming, GA

19d ago

Full time Active Directory Azure Ad / Entra Id Cloud Platforms

Apply Now

Job Description

Specialty Appliances LLC offers a supportive, hybrid-friendly environment for an entry-level Desktop Support Engineer I in Cumming, GA. The role supports end users across the company’s dental and orthodontic labs, with a mix of on-site work and remote troubleshooting. You will work with modern endpoint, identity, networking, and cloud systems while following structured processes tied to regulated healthcare and medical-device standards.

What you’ll do

Provide on-site support at the Cumming, GA lab and remote assistance to users at other labs via phone, Teams, the ticketing system, and remote-control tools
Install, configure, and troubleshoot Windows, macOS, and Linux workstations and laptops, along with printers, scanners, docking stations, and related peripherals
Prepare, deploy, and retire devices for standard builds, including new-hire setups and offboarding
Support CAD and production workstations and connected lab equipment; coordinate with vendors when issues fall outside internal scope
Apply software updates and patches using established schedules and change procedures
Maintain accurate hardware and software asset inventory
Handle occasional after-hours or weekend maintenance for urgent production issues across Eastern and Central time zones
Perform first-line administration for identity and access, including Active Directory and Microsoft Entra ID tasks such as onboarding, offboarding, password resets, unlocks, and group membership changes
Support MFA enrollment, sign-in issues, and access-related user problems, escalating policy changes to senior team members
Assist with the transition from on-premises Active Directory to Entra ID, including device enrollment, user communication, and post-migration troubleshooting under guidance
Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint
Troubleshoot wired, wireless, VPN, and internet connectivity issues, collecting diagnostic details before escalation
Complete on-site infrastructure tasks at the Cumming site such as patching cables, replacing network devices, moving equipment, and checking UPS units
Monitor assigned system and service health alerts and route issues to the appropriate owner
Triage user-reported issues for AWS, Azure, and vendor-hosted platforms, determining whether the cause is local, network, identity, or service-side
Open, track, and follow up on vendor support cases while keeping users and internal stakeholders informed
Complete basic, documented administrative tasks in AWS and Azure as assigned, with appropriate access and oversight
Document tickets thoroughly, create and maintain knowledge base articles, how-to guides, and standard procedures for recurring issues
Follow security and compliance practices required by HIPAA, ISO 13485, and 21 CFR Part 11, including access controls, change records, and handling of protected health information
Report suspected security incidents, phishing attempts, or policy violations through established channels
Use AI-assisted tools (e.g., Claude, Microsoft Copilot) to research issues, draft documentation/KB articles, and build simple scripts, while verifying AI outputs before acting and avoiding sensitive company or patient information in external AI services
Communicate clearly about work status, progress, and blockers; ask questions for help after initial research
Participate in agreed training and certification goals, treat everyone with respect, and complete culture-fit interviews as part of the recruiting process

What you bring

Working proficiency supporting Windows 10/11 desktops and laptops, including setup and reprovisioning, drivers, patches, user profiles, printers, and common peripherals
Foundational experience with Active Directory user and group administration, plus awareness of Microsoft Entra ID and how cloud identity differs from on-premises AD
Ability to support Outlook, Teams, OneDrive, and SharePoint for end users, including mailbox access, sync, and basic licensing issues
Core networking understanding (TCP/IP, DHCP, DNS, VLANs, Wi-Fi, VPN) and ability to use tools like ping, ipconfig, tracert, and nslookup
Basic ability to troubleshoot macOS and Linux, including user accounts, network settings, application installation, and common command-line tasks
Conceptual understanding of AWS and Azure (virtual machines, storage, identities and roles) to triage user-facing issues
Experience working from a ticket queue, documenting troubleshooting steps and resolutions, and supporting users with remote-control tools
Patient, professional communication with non-technical users, with an emphasis on minimizing disruption to lab production
Comfort taking ownership of tickets from intake through resolution, following documented procedures and keeping users informed
Eagerness to build depth across Windows, identity, networking, and cloud, including working through change during an AD-to-Entra modernization
Ability to handle access to user accounts, devices, and patient-related data with confidentiality and sound judgment
Associate’s or Bachelor’s degree in Information Technology, Computer Science, or related field, or equivalent hands-on experience
Entry-level certifications such as CompTIA A+, Network+, Security+, Microsoft 365 Fundamentals (MS-900), Azure Fundamentals (AZ-900), Endpoint Administrator (MD-102), or AWS Certified Cloud Practitioner
Exposure to endpoint management tools like Microsoft Intune and Windows Autopilot
Exposure to hybrid identity concepts (e.g., Entra Connect or Cloud Sync, hybrid-joined devices) or experience participating in an AD-to-Entra migration
Experience with Apple device management (e.g., Jamf, Intune for macOS, or similar)
Familiarity with basic scripting in PowerShell or Bash to automate routine tasks
Experience supporting multi-site organizations or remote locations
Experience in regulated healthcare, medical device, or manufacturing environments (e.g., HIPAA, ISO 13485)
Exposure to supporting specialized production equipment such as 3D scanners and printers, CAD workstations, or other lab equipment
Valid driver’s license and willingness to travel to another lab location only if an unusual situation requires on-site support

Benefits

Medical, Dental & Vision Insurance
Short-term Disability, Long-term Disability, AD&D and Life Insurance Policies
Paid Vacations
9 Paid Company Holidays
Bonus Plan
401(k) with Company Match

Travel: This role is not expected to travel. Travel to another lab location would be infrequent and only if an unusual situation requires on-site support.

View full job page →

19d ago

Senior IT Support Engineer (Tier 2/3)

I.T. WORKS! Inc. West Barnstable, MA

West Barnstable, MA

19d ago

$80k - $100k/yr Full time Senior Active Directory Azure

Apply Now

Job Description

The Senior IT Support Engineer (Tier 2/3) role at I.T. WORKS! Inc. is an in-person position based in West Barnstable, MA, focused on advanced troubleshooting and escalated client support within an MSP environment. The role also contributes to infrastructure and project work, including deployments and migrations.

Role Responsibilities

Own issues that require additional time or technical depth beyond the frontline Support Team.
Troubleshoot and resolve problems involving Windows desktops and servers.
Troubleshoot and resolve problems involving Active Directory and Group Policy.
Troubleshoot and resolve problems involving Microsoft 365 and Exchange.
Troubleshoot and resolve problems involving Microsoft Entra ID and Azure environments.
Troubleshoot and resolve problems involving firewalls, switches, VLANs, and VPNs.
Troubleshoot and resolve problems involving DNS and network connectivity.
Troubleshoot and resolve problems involving backup and recovery systems.
Troubleshoot issues involving business applications and third-party software.
Troubleshoot hardware and infrastructure issues.
Take ownership of escalated tickets and help engineers troubleshoot difficult issues.
Share knowledge, mentor team members, and help identify recurring problems and improvement opportunities.
Work directly with clients and keep them informed throughout an issue.
Assist frontline support when escalation volume allows.
Perform onsite client work when needed.
Collaborate with the Project Team on server deployments and migrations, network and firewall upgrades, Microsoft 365 and cloud migrations, infrastructure replacements, backup and disaster recovery improvements, and client technology standardization.
Participate in an on-call rotation, including occasional weekends.
Occasionally travel to client locations.

Required Qualifications

4+ years of professional IT support experience.
Strong troubleshooting skills for Windows workstations and Windows Server.
Working knowledge of Active Directory.
Microsoft 365 administration experience.
Networking knowledge including TCP/IP, DNS, DHCP, VLANs, and VPNs.
Experience troubleshooting firewalls and network connectivity.
Ability to independently investigate and resolve unfamiliar technical problems.
Strong written and verbal communication skills, including professional client communication.
Strong documentation habits.
Ability to commute to the West Barnstable, MA office.

Technologies

Windows
Active Directory
Group Policy
Microsoft 365
Exchange
Microsoft Entra ID
Azure
Firewalls
DNS
TCP/IP
DHCP
VLANs
VPNs
Backup and recovery systems
macOS
AI technologies and tools
CompTIA A+, CompTIA Network+, CompTIA Security+, CompTIA Server+, CompTIA Cloud+
Cisco / CCNA
Microsoft Certified: Azure Fundamentals

Benefits

Health insurance
401(k) with company match
Life insurance
Long-term disability insurance
Paid time off
Incentive compensation through the Works Perks program
Paid additional compensation for participation in the on-call rotation
Opportunities to grow into additional Project Team responsibilities
401(k) matching
Dental insurance
Tuition reimbursement
Vision insurance

Nice to Have

CompTIA A+, Network+, Security+, Server+, or Cloud+
Microsoft 365
Microsoft Azure / Entra ID
Cisco / CCNA
Firewall platforms
Backup and disaster recovery
macOS support and integration
AI technologies and tools

Compensation

Salary: $80,000 to $100,000 per year, based on experience and technical background. On-call work is compensated in addition to salary.

Schedule and Work Location

Full-time
Monday through Friday
8-hour shift
On-site in West Barnstable, Massachusetts
On-call rotation with occasional weekends
Occasional travel to client locations
Shift availability: Day Shift (Required), Night Shift (Required), Overnight Shift (Preferred)

Application Questions

Have you worked for a managed services provider before?
Do you understand that this is an in-office position?
Do you live within 50 miles of West Barnstable, MA?

Experience, Certifications, and Commuting

MSP experience: 4 years (Preferred)
Education: High school or equivalent
Certifications (Preferred): CompTIA A+, CompTIA Network+, Microsoft Certified: Azure Fundamentals
Ability to commute: West Barnstable, MA (Required)

View full job page →

20d ago

Cyber Security Engineer

Trystar Inc Burnsville, MN

Burnsville, MN

20d ago

$130k - $160k/yr Full time Azure Azure Ad / Entra Id Cloud

20d ago

IT Support Engineer

Remote

3mo ago Closed

Full time Active Directory Azure Azure Active Directory

Microsoft Entra Id Engineer Jobs

Get Microsoft Entra Id Engineer Jobs alerts