Basic Purpose
The Junior IT Administrator is an entry-level technical resource responsible for the day-to-day operational administration of the enterprise identity estate, including Microsoft Entra, Active Directory, Active Directory Lightweight Directory Services (AD-LDS), and Active Directory Federation Services (ADFS). This role executes recurring identity and access management (IAM) service requests, supports incident resolution for workforce authentication technologies, and serves as a first point of contact for IAM consultation requests from across the organization.
In addition to operational execution, this role reviews new application requests against IAM best practices, providing governance boards with the analysis needed to make informed decisions before a purchase or integration commitment is made. Success in this role is measured by accuracy, responsiveness, adherence to least-privilege principles, and the ability to escalate appropriately when an issue exceeds defined operational boundaries.
Responsibilities
- Entra Service Principal and Enterprise Application Administration
- Provision and de-provision service principal names (SPNs) in Microsoft Entra in accordance with established standards and approval workflows.
- Create and administer Enterprise Applications, including configuration of sign-on settings, ownership assignment, and user/group assignment.
- Evaluate and assign API permissions, ensuring requested permissions are scoped to the minimum required and routed for appropriate approval when privileged.
- Coordinate with the Secrets Management team to track and complete client secret and certificate renewals in advance of expiration, preventing service outages.
- Application Request Review and Governance Support
- Review new application requests against IAM best practices and provide findings to governance boards prior to purchase or integration decisions.
- Evaluate the IAM components and integration requirements of proposed applications, documenting dependencies and gaps.
- Identify the level of support each application provides for modern authentication protocols, including OIDC, SAML, and Integrated Windows Authentication.
- Determine how users are provisioned and de-provisioned within the application (SCIM, Just-In-Time, or manual) and note the governance implications