• Be the operational owner of our identity platform and access governance program, responsible for "who — and what — has access to what". • Own the full identify lifecycle including automated provisioning/deprovisioning, and timely access revocation. • Govern external identities: Entra External ID / B2B guest access, cross-tenant collaboration, access packages, and routine guest access reviews. • Manage non-human identities: service principles, managed identities workload identities, and service accounts, including credential rotation, secret/certificate lifecycle, federated credentials. • Administer ID platform; conditional access policies, new program rollouts, identity protection, risk-based access controls, and Privileged Identity Management (PIM). • Design and operate SSO and SCIM provisioning integrations across the SaaS application portfolio. • Lead periodic access reviews and recertification campaigns; maintain least-privilege and role-based access control (RBAC) models across M365, Azure, and SaaS systems. • Manage privileged access: break-glass accounts, admin role assignments, just-in-time (JIT) elevation, and segregation of duties. • Establish and enforce external collaboration governance: which tenants can collaborate with Dianthus, what data can be shared, how guest accounts are sponsored, and how they are decommissioned. • Support IAM audit and compliance evidence collection. • Support the response to identity-related security events in partnership with the cyber team.

Role Description Cardinal Technology Systems Corp. is currently seeking an Okta Senior Systems Administrator to work for our company. - Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). - This includes planning, developing, installing, configuring, maintaining, supporting, and optimizing all network software and communication links within DLA's Okta footprint. - Organizes and directs the configuration and operation of DLA's Okta. - Analyzes and resolves end user software program and connectivity issues. - Conducts capacity and performance analysis and provides system configuration change and upgrade recommendations. - Increases system administrator efficiency and accuracy via the use of automated tools and scripts. - Develops system administrator procedures and conducts system administrator training and skills assessment. - Provides end user training. - Provides recommendations on technology direction to align with business vision. - Provides local and remote maintenance support to various operational systems within the DLA Okta footprint. - Support includes general maintenance, upgrades, and new installs of servers and applications. - Directs the work of other system administrators to provide day-to-day system administration, including system and resource optimization, and user assistance. - Applies advanced technical knowledge of application networking, including load balancing applications, and ensuring fault tolerance. Qualifications - 5+ years of overall professional experience supporting Okta environments with progressively higher responsibility in the IT field. - Proposed Okta administrators shall be fully trained with demonstrable experience deploying and maintaining Okta environments for large enterprises. - Personnel will also be well-versed in configuring Okta integrations to work with typical enterprise technologies like Active Directory, firewalls, APIs, Zero Trust endpoints, etc. - Relevant Okta certification from a nationally recognized technical authority. Requirements - Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). - (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies) Benefits - Medical, Dental, Vision Benefits - Paid Life - Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave - Semi-monthly pay cycle

• Architect and oversee enterprise server and infrastructure environments — Windows, Linux, and Unix servers, virtualization platforms, and storage. • Design and improve mission-critical ISP services for high availability and redundancy at large customer scale. • Build advanced automation and orchestration frameworks — tools, pipelines, and processes using Ansible, Terraform, and Python — that standardize deployments and remove manual intervention. • Lead vulnerability management, incident response, and compliance programs (FCC, PCI, SOC 2). • Guide system hardening and risk mitigation, and design and regularly test disaster-recovery, backup, and failover procedures. • Act as the highest-level technical escalation point and lead large cross-department infrastructure projects with senior network and engineering teams. • Drive adoption of emerging technologies, mentor junior and mid-level administrators, and produce executive-level documentation and reporting.

• Provide support for applications, services and servers at the University of Massachusetts Global. • Responsible for the setup, installation, configuration, upgrading, and evaluation phases of providing applications, services, and servers for customer use. • Provide technical, instructional, and administrative support to the UMass Global constituencies related to applications, services, and servers. • Manage application and server backups across the enterprise and cloud (AWS and Azure). • Diagnose, replace, upgrade, and repair applications, services, and servers for Windows and Linux. • Install new, upgrade existing, and troubleshoot application, service, or server related issues. • Use and maintain tools such as Azure Update Manager to manage operating system patching and enterprise services. • Write and maintain PowerShell scripts for reporting and system automation. • Handle technical inventories, shipping logistics, and equipment organization. • Perform work in accordance with systems diagrams. • Create and maintain training documentation for team members supporting applications and services. • Continuously assess all documented processes for improvements. • Provide high quality support to university customers. • Work with teams and team members to provide our customers an excellent experience. • Perform other duties as assigned.