Systems Administrator - M365 & Identity at Blue Origin in Seattle, WA

Job description

Application close date: Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! This role is part of Enterprise Technology (ET), where we’re developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin’s mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies. We are seeking an experienced Systems Administrator III to support and evolve our enterprise identity, access, collaboration, and data protection platforms. In this role, you will administer core Microsoft 365 and identity services, help govern who has access to what, and build automation that improves security, efficiency, and user experience. You will work across a broad platform portfolio, including the Microsoft 365 productivity and security suite, enterprise identity and access management systems, and the orchestration tools that connect them, and you will use AI to build smarter, more scalable solutions. This is a high-impact role for someone who enjoys technical ownership, problem-solving, and continuous improvement in a regulated, high-security environment. Responsibilities include but are not limited to: Administer and maintain Microsoft 365 services, including Exchange Online, SharePoint, Teams, OneDrive, and the security and compliance stack (such as Defender, Purview, and Sentinel integrations). Manage identity lifecycle, authentication, and access across cloud and hybrid identity systems, including SSO/federation, MFA, Conditional Access, directory services, and privileged access. Support identity governance processes, including access requests, role-based and birthright access, access reviews and certification campaigns, and joiner/mover/leaver automation. Support data protection and information governance, including sensitivity labeling and classification, permission remediation, data access governance, and collaboration-space lifecycle management. Support credential and secrets management platforms, such as enterprise password managers, privileged access tools, and secrets vaults. Support resilience of identity and collaboration platforms, including backup, recovery, and disaster-recovery testing. Support email and collaboration security, including mail flow, filtering, and secure submission and relay practices. Support secure external and international collaboration, including partner, guest, and non-US-person identity, cross-tenant access, and approval workflows that account for export-control, data-residency, and sovereignty requirements. Design and operate access controls that account for person-based and geographic restrictions, such as Conditional Access with location-based policies, program-scoped access for non-US persons, phishing-resistant MFA for sensitive access, and time-bound access with expiration. Support identity and collaboration workflows for international sites, subsidiaries, and partners, including onboarding and offboarding for a globally distributed workforce across time zones. Build automation and integrations using scripting (such as PowerShell), APIs (such as Microsoft Graph), and orchestration and workflow tools (such as Tines or Okta Workflows), and apply configuration-as-code practices where they fit. Develop and apply AI-driven automation to improve reliability, reduce operational toil, and streamline identity and access processes. Troubleshoot and resolve tier-3 issues across identity, authentication, and collaboration platforms. Monitor platform health, proactively address p