Note: The job is a remote job and is open to candidates in USA. California FAIR Plan Association is seeking an IT Cloud & Identity Administrator II to administer, secure, and improve its cloud, identity, and related infrastructure environments. The role manages Microsoft 365, Entra ID, Azure, AWS, endpoint management, directory services, privileged access, security operations, and hybrid infrastructure while participating in after-hours on-call responses.
Responsibilities
- Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, Active Directory, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and related cloud, identity, and enterprise services
- Manage identity and access controls across the user and application lifecycle
- Administer privileged access and PAM-related processes, including privileged account management, approval workflows, service account governance, privileged session monitoring, and periodic validation
- Perform advanced systems and cloud administration for hybrid infrastructure, including servers, directory services, cloud workloads, patching, vulnerability remediation, configuration management, and operational controls
- Support security operations by reviewing alerts, logs, access activity, cloud events, and vulnerability findings
- Recommend and implement remediation or compensating controls as appropriate
- Lead assigned cloud, identity, infrastructure, security, and automation initiatives
- Develop and maintain standards, procedures, technical documentation, runbooks, configuration records, access review evidence, and operational artifacts to support reliable, audit-defensible IT and security operations
- Partner with business stakeholders and vendors to resolve complex issues, improve reliability and controls, and participate in after-hours on-call responses
Skills
- Minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role
- Advanced knowledge of Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and related cloud and enterprise services
- Strong understanding of identity, access, and privileged access management practices, including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews
- Experience supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls in hybrid environments
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field preferred; equivalent advanced technical experience may be considered
- Working knowledge of scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, application provisioning, SAML/OIDC, SCIM, API-based account lifecycle management, and infrastructure as code concepts such as Terraform preferred
- Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks and relevant certifications preferred
Company Overview