Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 15 hours ago

IAM Administrator

247Hire

Where
Vienna
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIAM Administrator247Hire · Vienna

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on 247Hire's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted 15 hours ago

The posting

Key Responsibilities:

  • Entra Service Principal and Enterprise Application Administration
  • Provision and de-provision service principal names (SPNs) in Microsoft Entra in accordance with established standards and approval workflows.
  • Create and administer Enterprise Applications, including configuration of sign-on settings, ownership assignment, and user/group assignment.
  • Evaluate and assign API permissions, ensuring requested permissions are scoped to the minimum required and routed for appropriate approval when privileged.
  • Coordinate with the Secrets Management team to track and complete client secret and certificate renewals in advance of expiration, preventing service outages.
  • Application Request Review and Governance Support
  • Review new application requests against IAM best practices and provide findings to governance boards prior to purchase or integration decisions.
  • Evaluate the IAM components and integration requirements of proposed applications, documenting dependencies and gaps.
  • Identify the level of support each application provides for modern authentication protocols, including OIDC, SAML, and Integrated Windows Authentication.
  • Determine how users are provisioned and de-provisioned within the application (SCIM, Just-In-Time, or manual) and note the governance implications of each model.
  • Review the permissions and privileges required by the application and flag excessive or unsupported access requirements.
  • IAM Consultation and Analytical Support
  • Field IAM consultation requests and provide analytical information regarding Entra, Active Directory, and AD-LDS components.
  • Research and report security group information, including owners, membership, naming, and descriptions.
  • Perform object management activities for service principals, service accounts, and groups where automation is not currently in place.
  • Troubleshoot identity synchronization issues between identity providers, including Entra and Active Directory.
  • Provide clear direction to consumers of IAM services on how to submit requests through approved intake channels.
  • Incident Resolution Support
  • Troubleshoot and remediate Active Directory account repeat lockout events, identifying and reporting the source of the lockouts.
  • Troubleshoot authentication failures for both human and non-human identities across Active Directory, AD-LDS, and Entra.
  • Troubleshoot and resolve end user incidents involving YubiKey, HYPR, and LastPass.
  • Troubleshoot and resolve authentication issues attributable to Conditional Access policy evaluation.
  • Assist with object recovery in Active Directory for user, group, and computer objects.
  • General
  • Ensure the security and integrity of identity solutions, including compliance with organizational and Information Security principles and practices.
  • Perform other duties as assigned.

Qualifications:

  • Associate degree in Information Technology, Computer Science, or a related field, or the equivalent combination of education, training, and experience.
  • One to three years of experience in IT operations, service desk, systems administration, or a directly related technical support function.
  • Working knowledge of Active Directory fundamentals, including users, groups, computers, organizational units, and authentication basics.
  • Foundational understanding of authentication and authorization concepts, including single sign-on, multifactor authentication, and least privilege.
  • Familiarity with the Microsoft Entra admin center and basic administration of users, groups, and applications.
  • Demonstrated troubleshooting and problem isolation skills, with the ability to document findings clearly.
  • Effective verbal and written communication skills and the ability to work directly with end users and application teams.
  • Ability to follow documented procedures, change management processes, and approval workflows with a high degree of accuracy.

Desired Qualifications:

  • Bachelor's degree in Information Technology, Cybersecurity, or a related field.
  • Hands-on experience administering service principals, app registrations, and Enterprise Applications in Microsoft Entra, including API permission and consent models.
  • Experience with ADFS relying party trusts, claim rules, and SAML signing and encryption certificate management.
  • Practical knowledge of modern authentication protocols, including SAML 2.0, OIDC/OAuth 2.0, Kerberos, and Integrated Windows Authentication.
  • Experience with SCIM-based or Just-In-Time user provisioning.
  • Experience supporting passwordless and phishing-resistant authentication technologies such as YubiKey (FIDO2/PIV) and HYPR.
  • Familiarity with AD-LDS and directory synchronization technologies such as Entra Connect.
  • PowerShell scripting ability, including use of the Microsoft Graph PowerShell SDK for reporting and bulk object management.
  • Experience working within an ITSM platform such as ServiceNow for request, incident, and change management.
  • Exposure to identity governance concepts such as access certifications, entitlement management, and Conditional Access policy design.
  • Relevant certifications such as Microsoft SC-300, SC-900, AZ-104, or CompTIA Security+.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against 247Hire's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on 247Hire's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    247Hire's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.