Identity and Access Management Administrator (full-time/1950 hours/year) @ Any Northwood Tech Campus Location

Northwood Technical College is seeking applications from qualified candidates for a full-time Identity and Access Management Administrator at any of our four campus locations. (Ashland, New Richmond, Rice Lake, or Superior)

The Identity and Access Management Administrator is responsible for managing, maintaining, and securing the institution's hybrid identity infrastructure. This position ensures that user accounts, access controls, and authentication services function reliably and securely across Microsoft Entra ID (Azure AD), on-premises Active Directory, and integrated enterprise systems such as Microsoft 365 and Dynamics 365 (HR and Finance). The administrator supports lifecycle management processes, compliance initiatives, and automation efforts that enhance user experience and protect institutional data and participates in the triage and remediation of identity-related security incidents and alerts within Microsoft Defender, including investigation of risky sign-ins, compromised accounts, and privilege misuse in coordination with cybersecurity teams.

Actively embody and promote Northwood Tech's Values:
• Collaboration - Value relationships that enhance learning and promote economic development.
• Innovation - Embrace the latest theories and technologies to support student and community success.
• Excellence - Prioritize high quality education, services, and continuous improvement in a dynamic learning environment.
• Community - Value our deep connections to our communities by working together to provide solutions through student success.
• Support - Empower individuals by supporting their success with quality experiences and services designed to meet their needs.
• Integrity - Uphold honesty and accountability in a diverse, open, and ethical learning and working environment.
• Respect - Value each individual and approach all interactions mindfully, with civility, empathy, and openness to new and differing ideas.
• Administer Microsoft Entra ID and on-premises Active Directory environments, including user and group management, synchronization, and hybrid configurations.
• Manage and develop identity lifecycle processes (creation, modification, and deactivation of accounts) across multiple systems, ensuring alignment with HR data.
• Triage identity-related security incidents and alerts in Microsoft Defender (Defender for Identity, Defender for Cloud Apps, and Defender XDR), investigating compromised accounts, risky sign-ins, privilege misuse, and MFA anomalies; coordinate remediation.
• Implement and manage role-based access control (RBAC) in Entra ID and Microsoft 365.
• Create integrations between identity systems and enterprise applications, including Dynamics 365, Microsoft 365, and other cloud-based services.
• Develop and configure authentication and authorization mechanisms such as Conditional Access, MFA, and Single Sign-On (SSO).
• Develop and manage automation scripts, integrations, and workflows to streamline provisioning, deprovisioning, and group management.
• Participate in security audits and ensure compliance with institutional, state, and federal policies regarding access control and data protection.
• Collaborate with cybersecurity, systems, and application teams to ensure consistent and secure identity practices across systems.
• Create technical documentation and user support related to account management, access requests, and authentication issues.
• Assist in the evaluation and deployment of identity governance and zero-trust security technologies.
• Other duties as assigned.

Degree & Experience Required:

• Bachelor's degree in a related field, or progress toward completion of a bachelor's degree.
• A minimum of four (4) years of relevant professional experience in an IT systems or infrastructure-focused role, with at least one (1) year of experience supporting identity and access management, authentication, authorization, DevOps, or directory services.
• One (1) year of supervisory or leadership experience. **

**In place of supervisory or leadership experience, applicants may demonstrate one year of additional work experience in a related field or completion of a relevant program of study within an accredited degree program.

Knowledge, Skills, and Abilities:

• Strong understanding of Microsoft Entra ID (Azure AD) and Active Directory administration.
• Experience with Microsoft 365, Exchange Online, and Teams identity integration.
• Familiarity with Dynamics 365 HR and Finance, especially as a source system for user provisioning.
• Knowledge of identity lifecycle automation tools, PowerShell scripting, and Microsoft Graph.
• Understanding of SSO, SAML, OAuth, and Conditional Access policies.
• Working knowledge of information security principles, particularly related to authentication, authorization, and least-privilege access.
• Excellent analytical, organizational, and documentation skills.
• Ability to work collaboratively with IT staff, HR, and other campus departments.

FY26 Salary - Grade L - $33.03 / hour

Medical, Dental, Vision
Health Savings Account/Flexible Spending Account
Long Term/Short Term Disability
Life Insurance
Wisconsin Retirement System
403(b)/457(b) Retirement Savings
Paid Holidays
Paid Leave