Technology Support Analyst – Identity Management

About the opportunity

SWCA Environmental Consultants seeks a Technology Support Analyst – Identity Management to support our growing Technology Team. This role is responsible for administering and governing user identities, access rights, authentication services, and employee technology lifecycle processes across SWCA’s technology environment. This role serves as a key partner to Human Resources, Information Security, Technology Operations, and business leaders to ensure employees have secure, timely, and appropriate access to technology resources throughout their employment lifecycle. This position supports user provisioning and deprovisioning, role-based access administration, Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), enterprise application access management, and identity governance processes. This role helps maintain alignment with organizational security standards while delivering an exceptional employee experience. Success in this role requires strong attention to detail, a security-first mindset, excellent customer service skills, and the ability to manage a high volume of requests while balancing security, compliance, and operational efficiency.

This is a full-time, regular (with benefits), salaries/exempt position based in our Broomfield, Colorado office with options for a hybrid or distributed (=remote) working environment.

Application Deadline: Applications are reviewed on a rolling basis, and interviews may be scheduled as qualified candidates are identified. This position may close without prior notice once a strong candidate pool is established.

About SWCA

SWCA Environmental Consultants is a 100% employee-owned environmental consulting firm providing full spectrum environmental services across the United States. Our North Star is to be the best place to work and a leader in sustainability, delivering sound science and creative solutions to complex environmental challenges.

We are guided by our core values every day. We collaborate as #OneSWCA, we are #AlwaysLearning, we #NeverSettle, and we #GiveBack to our communities. With offices nationwide, SWCA offers a collaborative, team focused environment where employees can build meaningful and long-term careers.

What you will accomplish

• Provides advanced tier one and tier two troubleshooting and support for hardware, software, and network issues, ensuring timely resolution for end users.
• Delivers deskside and remote assistance to employees, addressing technical problems and maintaining high levels of customer service.
• Escalates unresolved or complex technical issues to specialized teams, documenting actions and ensuring follow-through until resolution.
• Installs, configures, and upgrades workstations, peripherals, and authorized software in accordance with company standards and security policies.
• Conducts user training and onboarding sessions, educating employees on technology usage, security practices, and system capabilities.
• Monitors service desk queues, prioritizes support requests, and meets established service level agreements to ensure operational efficiency.
• Maintains detailed records of support activities, asset inventories, and system configurations using organizational tracking tools.
• Assists with routine maintenance tasks such as software updates, patch management, and system backups to uphold reliability and security.
• Collaborates with cross-functional teams to identify recurring issues, recommend process improvements, and enhance support strategies.
• Communicates technical concepts clearly and professionally to non-technical users, fostering positive user experiences and technology adoption.
• Follows applicable federal, Tribal, state, local, industry, contractual, and company regulations, standards, and specifications.
• Performs related work as assigned.

Additional Job-Specific Responsibilities

• Coordinate identity and access activities for employee onboarding, transfers, promotions, organizational changes, and offboarding, ensuring access is provisioned, modified, or removed in accordance with approved requirements.
• Administer user accounts, security groups, distribution lists, shared mailboxes, and enterprise application access.
• Administer Microsoft Entra ID and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, passwordless authentication, and related identity security controls.
• Configure and maintain enterprise application integrations and authentication methods.
• Support role-based access control (RBAC), least-privilege access, identity governance, and privileged access management initiatives.
• Validate access requests against documented business justification, approval workflows, and security requirements.
• Conduct periodic access reviews and support internal and external audits, compliance reviews, and security assessments.
• Identify unauthorized or excessive permissions and coordinate appropriate remediation.
• Produce metrics related to employee onboarding, account provisioning, access administration, and identity governance activities.

Minimum Qualifications

Three years of relevant, progressively responsible experience. Five years of related experience is preferred; or any equivalent combination of experience, performance, training, and/or education. Knowledge normally obtained through post-secondary education or training; bachelor's degree preferred. A+, Cloud+, and ITIL Foundations certifications are preferred.

Experience and qualifications for success

• Associate's Degree (A.A.) or equivalent from a two-year college or technical school.
• Three (3) years of relevant industry experience including identity and access management, account administration, employee onboarding/offboarding workflows, and/or enterprise application administration. This also includes experience working in a customer-focused technology services environment.
• Experience administering Microsoft 365 and Microsoft Entra ID.
• Working knowledge of identity and access management concepts and practices, including role-based access control (RBAC), least-privilege access, and access governance.
• Experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and user authentication technologies.
• Experience administering SaaS applications and user permissions.
• Understanding of information security principles and compliance requirements.

Preferred Qualifications

• Bachelors degree in a relevant field.
• A+, Cloud+, and ITIL Foundations certifications.
• Five (5) years of relevant industry experience.
• Microsoft Fundamentals or related Microsoft certifications.
• Basic PowerShell scripting and automation experience.
• Familiarity with Microsoft Intune MDM platform and IT service management systems such as Freshservice.

Knowledge, Skills and Abilities:

• Strong analytical and troubleshooting skills.
• Exceptional attention to detail and accuracy.
• Ability to manage sensitive and confidential information.
• Strong organizational and time-management skills.
• Excellent verbal and written communication abilities.
• Demonstrated commitment to customer service and continuous improvement.
• Ability to work independently and collaboratively across teams.

Other Job Conditions

When driving is required

Applicants must possess a valid driver's license and meet SWCA's driver requirements.

When traveling is required

This position may require domestic travel, including travel by commercial airline. Candidates must be able to obtain and maintain all valid travel documents and identification required for work-related travel throughout the duration of employment.

Pay Range

SWCA is committed to salary equity and transparency. The expected pay range for this Denver, CO- based position is $83,735 per year to $109,680 per year. Actual pay may vary based on experience, qualifications, geographic location, and other factors permitted by law. Eligible employees may also receive performance-based bonuses. As a 100% employee-owned company, we invest in your future. Our Total Rewards package includes an Employee Stock Ownership Plan, 401(k) with profit sharing, medical, dental, and vision coverage, paid time off, wellness programs, and professional development opportunities.

Closing

If you need accommodation due to a disability, please contact accommodations@swca.com or call 1 480 581 5378. If you require assistance with the application process, please contact recruiting@swca.com.

Use of Technology in Hiring

SWCA may use approved technology, including AI-assisted tools, to support parts of the application and recruiting process. All selection and hiring decisions are made by SWCA employees, and candidates are not selected or rejected by automated systems. We are committed to a fair, transparent, and human-centered hiring experience.

Candidate Use of AI

Candidates may use AI tools to help prepare application materials and interviews. However, all application materials, assessments, and interview responses must accurately reflect their own experience, skills, and qualifications. AI must not be used to fabricate experience, complete assessments on their behalf, or otherwise misrepresent their background or abilities.

Equal Opportunity Employer

SWCA Environmental Consultants is an Equal Opportunity Employer. We encourage applications from women, minorities, veterans, and individuals with disabilities. We are committed to creating an inclusive workplace where all employees can thrive.

SWCA continues to invest deeply in career development programs, delivering our award-winning Career Landscape support resources to accelerate the growth of our staff. We recognize the valuable skills and experiences our internal team members bring to SWCA’s continued success. Qualified internal candidates are encouraged to apply and will be seriously considered for this position. We believe in promoting from within, where possible, providing our existing employees with compelling opportunities to advance their careers.