You own the identity, collaboration, and endpoint platforms every employee depends on: Active Directory and Entra ID, Microsoft 365 and Google Workspace, SSO for our SaaS stack, and device management across Windows and macOS. You script the repetitive work and document what you build.
Responsibilities:
Administer Active Directory and Entra ID: user lifecycle, groups, GPO, DNS, Entra Connect and hybrid sync health, Conditional Access, privileged-role and stale-account hygiene
Administer Microsoft 365 (Exchange, Teams, licensing) and Google Workspace (org units, groups, Drive governance, Entra-federated auth, multi-domain coexistence)
Own SSO onboarding and maintenance for SaaS applications in Entra (SAML/OIDC, SCIM where supported)
Endpoint management: Intune for Windows and Jamf for macOS, covering enrollment, compliance policy, patching, app deployment, and configuration baselines, in partnership with the desktop support team
Administer Mimecast and Webex Control Hub
Use scripting to make IT operations faster and more consistent: PowerShell and Graph for bulk user and license changes, group cleanup, reporting on stale accounts and device compliance, and Intune/Jamf deployment scripts. Look for the repetitive manual task and script it away
Own certificate renewals, service accounts, and backup verification for identity and SaaS data
Hands-on presence for the KC HQ: server room and network closet work, hardware receiving and staging, and onsite backup for AV and conference systems when the desktop team needs it
Maintain runbooks in the IT Confluence space
Tier 2 escalation for identity, licensing, collaboration, and endpoint tickets
Qualities:
4+ years in a Windows/Entra environment of 500+ users: AD (GPO, DNS, replication troubleshooting), Entra Connect, Conditional Access
Hands-on Intune and Jamf administration
2+ years administering Google Workspace, ideally alongside M365
Comfortable in PowerShell: you write your own scripts for day-to-day admin work (bulk changes, reporting, Intune remediations) and can read and adapt Graph API calls
SSO configuration and troubleshooting (Entra enterprise apps)
Networking literacy (DNS, DHCP, VLANs, VPN)
Documents without being asked
Plus: Jira/Confluence administration, Mimecast, agency or professional-services background
BarkleyOKRP’s Commitment to Diversity, Equity, Inclusion + Belonging
At BarkleyOKRP, DEI+B drives work that matters. We believe people and creativity are made of the same substance, and when every perspective is valued, the impact is stronger. We build belonging as a business strategy, power inclusive creativity that delivers measurable results, and hold ourselves accountable as a B Corp committed to progress over performative intent. When people are valued, the work carries greater impact.
Job details are sourced from the employer's original posting.
