Keeping Washington Clean and Evergreen

The Department of Ecology is hiring an IT System Administration – Senior/Specialist within the Information Technology Security Services Office.

Location: Headquarters Office in Lacey, WA. Upon hire, you must live within a commutable distance from the duty station.

Schedule: This position is eligible for telework and flexible schedule options. You may telework most of your work time with occasional in-person meetings and activities. Schedules are dependent upon position needs and are subject to change.

Application Timeline: Apply by September 09, 2026. Applications submitted after the date above may not be reviewed unless additional qualified applicants are needed.

Duties

In this role, you will be the senior Identity and Access Management Administrator, with responsibilities for Windows Domain Controllers and cloud-based identity management platform, including Azure. You will be responsible for architecting and modernizing Ecology's Identity and Access Management strategy through the adoption of cloud-native technologies.

What you will do:

• Mentor and guide other Domain Administrators.
• Provide excellent customer service and collaborate with other teams to improve the security posture of Ecology's Identity and Access Management strategy.
• Communicate effectively with Management to articulate Ecology's strategy for modernizing Identity and Access Management.
• Assess the current Windows Domain Controller architecture and health and identify optimization opportunities.
• Assess the current Group Policy Objects architecture and health and identify opportunities to streamline.
• Assess and identify opportunities to improve the security posture of Ecology's Identity and Access Management strategy and infrastructure.
• Assess and plan the adoption of Intune based policy management.
• Design and plan the use of Azure technologies for cloud native Identity and Access Management.

Qualifications

Required Qualifications:

Seven years of experience and/or education related to the duties of the position, which must include the following:

• Critical Thinking & Decision-Making – Proven track record evaluating risks, analyzing complex IAM, AD, DNS, and GPO issues, and making informed decisions to maintain secure and stable operations.
• Security & Compliance – Demonstrated ability to apply and uphold security policies, governance requirements, and best practices to maintain compliant and secure identity, directory, and DNS environments.
• Identity & Access Management Administration – Demonstrated ability to manage identity lifecycles, authentication, permissions, and roles to ensure secure and efficient access control.
• Active Directory & Entra ID Management – Proven track record configuring, maintaining, modernizing, and troubleshooting Active Directory and Azure Entra ID to ensure reliable identity and directory services.
• Group Policy Architecture & Management – Demonstrated ability to design, implement, and troubleshoot GPOs to enforce secure configurations and agency-wide standards.
• DNS Administration & Architecture – Proven track record designing, implementing, securing, and troubleshooting on-premise and cloud DNS services to ensure accurate and reliable name resolution.
• System Maintenance & Continuity Planning – Demonstrated ability to apply updates, monitor performance, and implement disaster recovery strategies to maintain secure and resilient IAM, AD, and DNS operations.

Education involving a major study in Computer Science, Information Technology (IT), Science, Technology, Engineering, Mathematics (STEM), or closely related field. This position does not require formal education. Instead, applicants may meet the qualification requirement through experience alone or through any combination of experience and education totaling seven years.

Special Requirements/Conditions of Employment:

Must be able to provide transportation to and from office or offsite trainings or assignments. This position requires training to keep consistent with industry best practices. Leadership works with industry leaders to forecast changes in information technology and lists required training in this position’s yearly Performance Development Plan (PDP). Staff within this division are provided two (2) hours per week for training. It is expected that this position will take what is learned in their training and apply it to their daily work.

Desired Qualifications:

Cloud Infrastructure Familiarity – Ability to understand and work with broader Azure services (beyond Entra ID and DNS) to support identity integrations across cloud environments.

Scripting & Automation – Ability to use tools like PowerShell to automate identity, AD, DNS, and GPO tasks to improve efficiency and consistency.

Identity Governance & Administration (IGA) Tools – Ability to work with identity governance platforms and workflows to support lifecycle automation, attestation, and compliance.

Hybrid Identity Architecture – Ability to design and support hybrid identity environments that integrate on-premise AD with cloud identity platforms.

Network Infrastructure Awareness – Ability to understand related network components (firewalls, VLANs, routing) that affect IAM and DNS performance and security.

If you are excited about this role and meet the required qualifications, we encourage you to apply. Desired qualifications reflect additional knowledge, skills, or experience that are nice to have but not required.

Application Process

Ecology seeks diverse applicants: We view diversity, equity, inclusion, and respect through a broad lens including race, ethnicity, class, age, religion, sexual orientation, gender identity, immigration status, military background, language, education, life experience, physical disability, neurodiversity, and intersectional identities. Qualified job seekers from all backgrounds are encouraged to apply.