Security and Support Analyst

Job Title: Security and Support Analyst

Job Type: Full-time, Exempt

Location: Minneapolis, MN (Hybrid)

About the Role

Picture a new hire opening their laptop on Day 1 and everything just works. No waiting, no tickets, no mystery. Now picture a departing employee's access closed out cleanly within 24 hours, with the evidence to prove it. Behind both moments is you.

As our Security and Support Analyst, you'll hold the keys to our environment and also be the first friendly face when someone's laptop has other plans. You'll own the identity lifecycle across Active Directory and Entra ID, keep our Windows endpoints healthy with Intune and Autopilot, and write the PowerShell and Microsoft Graph automations that let the repetitive work run itself. You'll support colleagues right here in the Twin Cities and around the world, and partner with our Security and Compliance team on MFA, Conditional Access, and the responsible use of approved AI tools.

This is much more than a help desk role. If you love solving technical puzzles, take quiet pride in a well built group structure, get a little thrilled by a clean audit trail, and believe the best security feels invisible to the people it protects, we think you'll fit right in.

What You Will Do

• Own the full identity lifecycle across on-prem Active Directory and Entra ID: set up new-hire accounts ahead of start dates and keep them disabled until Day 1, process internal transfers by removing old access as well as adding new, and fully deprovision departing employees within 24 hours
• Design and maintain role-based access using security groups and the AGDLP model, applying least privilege to file shares, applications, and admin roles
• Administer Group Policy, OU structure, and delegation of control
• Run regular access reviews and cleanup of stale and orphaned accounts, unowned groups, nested-group sprawl, and privileged role membership, and produce audit-ready evidence
• Administer Microsoft 365 (Exchange Online, Teams, SharePoint) and manage Windows endpoints through Intune, Autopilot, configuration policies, updates, and application deployment
• Provide excellent hands-on support for local employees, and remote support for US and global employees as needed, across devices, Microsoft 365, and business applications
• Build PowerShell and Microsoft Graph automations that run under dedicated service accounts, gMSAs, or app registrations, with documented permissions, ownership, and change control
• Partner with Security and Compliance on MFA, Conditional Access, data deletion, audits, and the responsible use of approved AI tools

What You Bring

• 3+ years of hands-on Active Directory administration in a production domain: users, groups, OUs, delegation, DNS, and replication basics