System Administrator, Identity & Access Management

Dianthus Therapeutics

Remote · worldwide, UTC+4 acceptedSalary not disclosedfull-timeVerified 1w agoHimalayas

Dianthus is growing quickly, and we are looking for a hands-on Systems Administrator with strong Identity and Access Management (IAM) expertise to help us scale securely. You will be the operational owner of our identity platform and access governance program, responsible for “who — and what — has access to what”, covering employee, contractor, external partner (B2B), and non-human (service) identities.

Responsibilities

Identity & Access Management
Own the full identify lifecycle including automated provisioning/deprovisioning, and timely access revocation
Govern external identities: Entra External ID / B2B guest access, cross-tenant collaboration, access packages, and routine guest access reviews
Manage non-human identities: service principles, managed identities workload identities, and service accounts, including credential rotation, secret/certificate lifecycle, federated credentials
Administer ID platform; conditional access policies, new program rollouts, identity protection, risk-based access controls, and Privileged Identity Management (PIM).
Design and operate SSO and SCIM provisioning integrations across the SaaS application portfolio.
Lead periodic access reviews and recertification campaigns; maintain least-privilege and role-based access control (RBAC) models across M365, Azure, and SaaS systems.
Manage privileged access: break-glass accounts, admin role assignments, just-in-time (JIT) elevation, and segregation of duties.
Establish and enforce external collaboration governance: which tenants can collaborate with Dianthus, what data can be shared, how guest accounts are sponsored, and how they are decommissioned.
Support IAM audit and compliance evidence collection

Languages

Work format: Remote
Seniority: Senior
Posted: 10 Jul 2026 (1mo ago)
Last verified: 17 Aug 2026
Apply by: 8 Sept 2026

Keep looking

More Operations jobs in Armenia All IT vacancies Internships and entry level

Loading…

Responsibilities

Identity & Access Management

Own the full identify lifecycle including automated provisioning/deprovisioning, and timely access revocation

Govern external identities: Entra External ID / B2B guest access, cross-tenant collaboration, access packages, and routine guest access reviews

Manage non-human identities: service principles, managed identities workload identities, and service accounts, including credential rotation, secret/certificate lifecycle, federated credentials

Administer ID platform; conditional access policies, new program rollouts, identity protection, risk-based access controls, and Privileged Identity Management (PIM).

Design and operate SSO and SCIM provisioning integrations across the SaaS application portfolio.

Lead periodic access reviews and recertification campaigns; maintain least-privilege and role-based access control (RBAC) models across M365, Azure, and SaaS systems.

Manage privileged access: break-glass accounts, admin role assignments, just-in-time (JIT) elevation, and segregation of duties.

Establish and enforce external collaboration governance: which tenants can collaborate with Dianthus, what data can be shared, how guest accounts are sponsored, and how they are decommissioned.

Support IAM audit and compliance evidence collection