Azure Entra Administrator

Gaithersburg, MD

Full-time

Remote

$72K/yr - $130K/yr

Entry, Mid Level

Leidos is seeking a Microsoft Entra/Intune Systems Administrator to join their program in Gaithersburg, MD. This role involves hardening the Microsoft Entra tenant, enabling device-based access with Intune, and supporting public-facing applications in a security-focused environment.

Apply Now

Responsibilities

Assist in hardening Microsoft Entra ID tenants and accounts, enforce phishing-resistant MFA registration policies, and build conditional access policy architecture.
Implement and operate identity lifecycle workflows: HR-driven provisioning via Entra Cloud Sync/Connect, group/role standards, Access Reviews, and Entitlement Management.
Manage identity system migrations and centralization across legacy federated tenants and services.
Enroll and manage end user devices in Intune; implement compliance policies (OS version, disk encryption, AV/firewall, Secure Boot/TPM, Defender for Endpoint healthy).
Deploy Windows Hello for Business with hybrid join, integrate devices with Azure Defender, and manage risk with Azure Purview.

Qualification

Required

Bachelor’s degree in Computer Science, Information Systems, or related field and 2–4 years of relevant experience; or a Master’s degree with less than 2 years of experience. Additional years of relevant experience may be considered in lieu of a degree.
Hands-on administration experience with Microsoft Entra ID (Azure AD), SAML and single sign on, hybrid and external identities, and custom domains.
Hands-on administration experience with Active Directory Domain Services.
Ability to effectively collaborate with various project teams and to provide effective troubleshooting support when problems are unclear or unknown.
Ability to obtain Public Trust clearance.

Preferred

Specific experience working with Okta, Azure Sentinel, and/or Azure PIM.
Specific experience working with cloud PKI, PIV/CAC, or other certificate based authentication solutions.
Cloud certifications in Microsoft SC-300 or SC-401.