Microsoft Entra ID Systems Administrator

About the role:

Talent Map Global BPO, Inc. is a global talent solutions and business process outsourcing company connecting skilled professionals in the Philippines with growing North American businesses. We build dedicated offshore teams across technology, finance and accounting, marketing, and enterprise operations.

Our people-first culture is grounded in collaboration, integrity, continuous learning, and operational excellence. Team members gain meaningful exposure to international clients while building long-term careers in a supportive, performance-focused environment.

POSITION SUMMARY:

The Microsoft Entra ID & Account Systems Administrator is responsible for the administration, security, governance, and automation of enterprise identity and access management (IAM) services. This role manages Microsoft Entra ID, user lifecycle management, authentication services, licensing administration, role-based access controls (RBAC), conditional access policies, and identity-related security functions across Microsoft 365 and integrated applications.

The administrator serves as the primary steward of enterprise identities and is responsible for ensuring secure access to systems and data while supporting compliance requirements including NIST 800-171, ITAR, and other regulatory frameworks. The position plays a key role in automation initiatives involving account provisioning, deprovisioning, licensing, and access governance.

KEY RESPONSIBILITIES:

1. Identity and Access Management:

   • Administer Microsoft Entra ID tenant services and configurations.

   • Create, modify, disable, and delete user accounts.

   • Manage security groups, Microsoft 365 groups, distribution lists, and dynamic groups.

   • Maintain role-based access control (RBAC) assignments.

   • Perform periodic access reviews and entitlement validations.

   • Manage privileged access and administrative roles.

2. User Lifecycle Management:

   • Execute onboarding, transfer, and offboarding activities.

   • Ensure timely provisioning of accounts, licenses, and permissions.

   • Coordinate with Human Resources to maintain identity accuracy.

   • Reclaim licenses and remove access during employee separation.

3. Authentication and Security:

   • Configure and maintain Multi-Factor Authentication (MFA).

   • Develop and maintain Conditional Access policies.

   • Support password management, self-service password reset, and authentication security.

   • Monitor identity-related security alerts and investigate suspicious activity.

   • Assist with incident response activities involving user accounts and credentials.

4. Microsoft 365 Administration:

   • Manage Microsoft 365 licensing assignments and optimization.

   • Administer Exchange Online, Teams, SharePoint Online, and related services from an identity perspective.

   • Monitor license utilization and implement cost-saving initiatives.

   • Configure group-based licensing and automated assignment processes.

5. Automation and Process Improvement:

   • Develop and support identity automation using Microsoft Graph, Power Automate, PowerShell, and related technologies.

   • Automate onboarding, offboarding, RBAC updates, and compliance reporting.

   • Create workflow enhancements that reduce manual administrative effort.

   • Support AI and RPA initiatives that depend on Entra ID identity data.

6. Compliance and Governance:

   • Support NIST 800-171, DFARS, and organizational cybersecurity requirements.

   • Maintain audit-ready identity management records.

   • Conduct regular user access reviews.

   • Support evidence collection for cybersecurity audits and assessments.

   • Implement controls related to foreign national restrictions, CUI, and ITAR-protected environments where applicable.

7. Monitoring and Reporting:

   • Monitor directory health, synchronization status, and authentication performance.

   • Develop identity governance dashboards and reports.

   • Track inactive accounts, privileged users, and licensing utilization.

   • Generate compliance and executive-level reporting as required.

   • Perform other related duties and responsibilities as assigned that may not be specifically stated above.

QUALIFICATIONS:

1. Education and Experience:

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related discipline; equivalent relevant professional experience may be considered in lieu of a degree.

• Minimum of 3–5 years of experience administering Microsoft Entra ID (formerly Azure Active Directory) or related enterprise identity and access management environments.

• Demonstrated experience administering Microsoft 365 environments, including identity, account, licensing, authentication, and access-management functions.

• Experience with identity governance, user lifecycle management, access reviews, and privileged-access administration.

• Experience supporting cybersecurity, compliance-driven, or highly regulated environments.

• Experience supporting DoD, federal, government-contractor, or similar regulated environments is preferred.

• Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft 365 Administrator, CompTIA Security+, or comparable certifications are preferred.

2. Systems and Technical Skills:

• Strong hands-on administration experience with Microsoft Entra ID and Microsoft 365.

• Experience with Identity Governance, RBAC, Conditional Access Policies, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Single Sign-On (SSO).

• Experience managing user accounts, security groups, Microsoft 365 groups, distribution lists, dynamic groups, administrative roles, and access permissions.

• Proficiency with PowerShell scripting and Microsoft Graph API for identity administration and automation.

• Experience with Active Directory hybrid environments, directory synchronization, and authentication services.

• Experience with Microsoft 365 services, including Exchange Online, Microsoft Teams, and SharePoint Online, from an identity and access perspective.

• Experience with group-based licensing, license administration, utilization monitoring, and automated license assignment.

• Familiarity with Power Automate, Logic Apps, RPA platforms, or comparable workflow-automation technologies is preferred.

• Working knowledge of Microsoft security and compliance capabilities.

• Familiarity with NIST 800-171, DFARS, CMMC, CUI, ITAR, and other applicable cybersecurity or regulatory frameworks is highly preferred.

• Ability to develop identity governance reports, compliance dashboards, and audit-ready documentation.

3. Core Competencies:

• Strong knowledge of Identity and Access Management (IAM) principles and security best practices.

• Strong cybersecurity and compliance awareness.

• Excellent analytical, troubleshooting, and problem-solving skills.

• Strong process-automation and continuous-improvement mindset.

• High attention to detail, particularly when managing user identities, permissions, privileged access, and security controls.

• Strong documentation and Standard Operating Procedure (SOP) development skills.

• Ability to identify and mitigate identity-related security and access risks.

• Strong organizational and project-coordination skills.

• Effective written and verbal English communication skills.

• Strong customer-service orientation when supporting users and internal stakeholders.

• Ability to collaborate effectively with HR, cybersecurity, IT, management, and other business functions.

4. Work Requirements:

• Full-time remote position supporting U.S.-based operations and stakeholders.

• Ability to work U.S. business hours / Philippine night shift as required.

• Ability to independently manage enterprise identity, authentication, licensing, and access-management responsibilities.

• Ability to respond to identity-related security incidents, suspicious account activities, authentication issues, and urgent access requirements.

• Must maintain accurate, secure, and audit-ready identity and access-management records.

• Ability to support periodic access reviews, cybersecurity audits, compliance assessments, and evidence-collection requirements.

• Must comply with applicable information-security, data-privacy, confidentiality, access-control, CUI, ITAR, and client-specific requirements.

• Ability to coordinate closely with Human Resources and other departments for employee onboarding, transfers, access changes, and offboarding.

• Perform other related duties and responsibilities as assigned that may not be specifically stated above.

COMPENSATION AND BENEFITS:

1. Base Salary - Competitive gross basic monthly salary, commensurate with the candidate’s qualifications, relevant experience, certifications, and specialized technical expertise.

2. Night Shift Differential - Provided in accordance with applicable Philippine labor requirements and company policy.

3. Statutory Benefit s - SSS, PhilHealth, Pag-IBIG, 13th-month pay, and applicable holiday pay in accordance with Philippine law.

4. Allowances - Applicable de minimis or work-related allowances, subject to company policy and employment terms.

5. Health Coverage - HMO coverage subject to the eligibility date and terms stated in the employment offer and company. policy.

6. Paid Leave - Vacation and sick leave benefits subject to eligibility, accrual rules, and company policy.

   EQUAL OPPORTUNITY AND DATA PRIVACY:

Talent Map Global BPO, Inc. is committed to fair and inclusive employment practices. Qualified applicants will be considered based on role-related skills, experience, and business requirements. Personal information submitted during recruitment will be handled in accordance with applicable privacy requirements and company policies.

IMPORTANT NOTICE:

This job description summarizes the role's principal responsibilities and requirements. It is not an exhaustive list, and duties may be adjusted based on client needs and business priorities. Compensation, benefits, work arrangement, shift, and employment terms remain subject to the final written offer and applicable company policies.