Technology Support Analyst – Identity Management

SWCA Environmental Consultants seeks a Technology Support Analyst – Identity Management to support our growing Technology Team. This role is responsible for administering and governing user identities, access rights, authentication services, and employee technology lifecycle processes across SWCA’s technology environment. This role serves as a key partner to Human Resources, Information Security, Technology Operations, and business leaders to ensure employees have secure, timely, and appropriate access to technology resources throughout their employment lifecycle. This position supports user provisioning and deprovisioning, role-based access administration, Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), enterprise application access management, and identity governance processes. This role helps maintain alignment with organizational security standards while delivering an exceptional employee experience. Success in this role requires strong attention to detail, a security-first mindset, excellent customer service skills, and the ability to manage a high volume of requests while balancing security, compliance, and operational efficiency.

This is a full-time, regular (with benefits), salaries/exempt position based in our Broomfield, Colorado office with options for a hybrid or distributed (=remote) working environment.

• →Coordinate identity and access activities for employee onboarding, transfers, promotions, organizational changes, and offboarding, ensuring access is provisioned, modified, or removed in accordance with approved requirements.
• →Administer user accounts, security groups, distribution lists, shared mailboxes, and enterprise application access.
• →Administer Microsoft Entra ID and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, passwordless authentication, and related identity security controls.
• →Configure and maintain enterprise application integrations and authentication methods.
• →Support role-based access control (RBAC), least-privilege access, identity governance, and privileged access management initiatives.
• →Validate access requests against documented business justification, approval workflows, and security requirements.
• →Conduct periodic access reviews and support internal and external audits, compliance reviews, and security assessments.
• →Identify unauthorized or excessive permissions and coordinate appropriate remediation.
• →Produce metrics related to employee onboarding, account provisioning, access administration, and identity governance activities.

Three years of relevant, progressively responsible experience. Five years of related experience is preferred; or any equivalent combination of experience, performance, training, and/or education. Knowledge normally obtained through post-secondary education or training; bachelor's degree preferred. A+, Cloud+, and ITIL Foundations certifications are preferred.

• Associate's Degree (A.A.) or equivalent from a two-year college or technical school.
• Three (3) years of relevant industry experience including identity and access management, account administration, employee onboarding/offboarding workflows, and/or enterprise application administration. This also includes experience working in a customer-focused technology services environment.
• Experience administering Microsoft 365 and Microsoft Entra ID.
• Working knowledge of identity and access management concepts and practices, including role-based access control (RBAC), least-privilege access, and access governance.
• Experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and user authentication technologies.
• Experience administering SaaS applications and user permissions.
• Understanding of information security principles and compliance requirements.

• Bachelors degree in a relevant field.
• A+, Cloud+, and ITIL Foundations certifications.
• Five (5) years of relevant industry experience.
• Microsoft Fundamentals or related Microsoft certifications.
• Basic PowerShell scripting and automation experience.
• Familiarity with Microsoft Intune MDM platform and IT service management systems such as Freshservice.

• Strong analytical and troubleshooting skills.
• Exceptional attention to detail and accuracy.
• Ability to manage sensitive and confidential information.
• Strong organizational and time-management skills.
• Excellent verbal and written communication abilities.
• Demonstrated commitment to customer service and continuous improvement.
• Ability to work independently and collaboratively across teams.

Applicants must possess a valid driver's license and meet SWCA's driver requirements. 

This position may require domestic travel, including travel by commercial airline. Candidates must be able to obtain and maintain all valid travel documents and identification required for work-related travel throughout the duration of employment.  

SWCA is committed to salary equity and transparency. The expected pay range for this Denver, CO- based position is $83,735 per year to $109,680 per year. Actual pay may vary based on experience, qualifications, geographic location, and other factors permitted by law. Eligible employees may also receive performance-based bonuses.  As a 100% employee-owned company, we invest in your future. Our Total Rewards package includes an Employee Stock Ownership Plan, 401(k) with profit sharing, medical, dental, and vision coverage, paid time off, wellness programs, and professional development opportunities.

If you need accommodation due to a disability, please contact accommodations@swca.com or call 1 480 581 5378. If you require assistance with the application process, please contact recruiting@swca.com.

SWCA may use approved technology, including AI-assisted tools, to support parts of the application and recruiting process. All selection and hiring decisions are made by SWCA employees, and candidates are not selected or rejected by automated systems. We are committed to a fair, transparent, and human-centered hiring experience. 

Candidates may use AI tools to help prepare application materials and interviews. However, all application materials, assessments, and interview responses must accurately reflect their own experience, skills, and qualifications. AI must not be used to fabricate experience, complete assessments on their behalf, or otherwise misrepresent their background or abilities. 

SWCA Environmental Consultants is an Equal Opportunity Employer. We encourage applications from women, minorities, veterans, and individuals with disabilities. We are committed to creating an inclusive workplace where all employees can thrive. 

SWCA continues to invest deeply in career development programs, delivering our award-winning Career Landscape support resources to accelerate the growth of our staff. We recognize the valuable skills and experiences our internal team members bring to SWCA’s continued success. Qualified internal candidates are encouraged to apply and will be seriously considered for this position. We believe in promoting from within, where possible, providing our existing employees with compelling opportunities to advance their careers.

#LI-AO1