System Administrator

Hybrid, Dublin

The Job

• Take full ownership of a high-risk, high-impact hybrid identity security hardening transformation program across Active Directory (AD) and Entra ID, driven by external audit findings and compliance targets.
• Design, implement, and enforce advanced Group Policies (GPOs) and Entra ID Conditional Access policies to drastically reduce the identity attack surface.
• Manage Privileged Access Management (PAM) frameworks, Microsoft Entra Privileged Identity Management (PIM), and enterprise-wide Multi-Factor Authentication (MFA) rollouts.
• Collaborate closely on Intune device management baselines to ensure security policies align seamlessly with endpoint compliance and identity governance.
• Conduct deep-dive risk assessments prior to deploying security baselines to prevent catastrophic service disruptions ("downing" Active Directory).
• Analyze and mitigate the downstream fallout of security policy enforcement on peripheral infrastructure, including Intune configurations, network segments, firewalls, and OneDrive.
• Shift focus away from day-to-day user provisioning to focus entirely on identity security architecture, policy design, and infrastructure protection.

Have You

• Operated as a Senior Active Directory / Entra ID Identity Security Engineer in complex, hybrid enterprise environments
• Successfully executed end-to-end AD and cloud identity security hardening initiatives based on external audit findings, security targets, or regulatory frameworks
• Designed and deployed robust Privileged Access Management (PAM/PIM) solutions and enterprise-wide Multi-Factor Authentication (MFA) policies
• Proven experience aligning Microsoft Intune device compliance policies with identity security strategies
• Demonstrated a deep technical understanding of the "fallout" that aggressive AD and Entra ID policy changes can have on networking, firewalls, and Intune managed devices
• Proven your ability to apply sensitive, high-impact security configurations to core identity infrastructure without causing unplanned environment downtime
• Obtained industry-recognized Microsoft Identity or Security certifications (e.g., SC-300, SC-100, AZ-500) to validate your technical expertise
• Berkley Business & Technology is a specialist consultancy, recruiting professionals for organizations throughout Ireland, UK & Europe; for more information go to www.berkley-group.com.
• If you would like to discuss this vacancy further or to discuss your career options in confidence, please send your profile to [email protected]