Identity Application Administrator

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There's a seat at our table for you...

Position Summary:

The Identity Application Administrator will be responsible for the daily operational health of our Identity Governance Administration (IGA) systems. This role moves beyond general administration; you will be the first line of defense in monitoring identity lifecycles, troubleshooting provisioning errors, and ensuring secure access for Gordon Food Service employees and contractors.

What you will do:

Operational Support & Incident Management

• Ticket Management: Monitor and resolve incidents and service requests assigned to the IAM group. This includes handling time-sensitive requests from HR.
• Inbox Monitoring: actively manage the IAM group inbox to identify and respond to unread messages, error notifications, and user inquiries.
• On-Call/After-Hours Support: Participate in an on-call rotation to handle urgent alerts and manage system dependencies during scheduled maintenance windows.

Identity System Administration

• Queue Management: Periodically review Pending Task queues for unusual depth or failures. Investigate anomalous error conditions in provisioning comments and metadata.
• Error Resolution: Troubleshoot and resolve known integration issues, such as:
  • Password history conflicts
  • Internal Server errors requiring coordination with teams.
• Job Control & Monitoring: Monitor job logs for failures or "hung" processes. Perform manual re-runs of import jobs while coordinating timing to avoid overlap with incremental provisioning.
• Maintenance: Pause and resume reconciliation jobs during downstream system outages to prevent data corruption.

User Lifecycle Management

• Rehire Auditing: Validate the "Rehired User" process to ensure correct behavior, including confirming Role assignments, birthright role provisioning, and the re-linking of orphaned Google accounts.
• Role Governance: Perform weekly de-provisioning of Enterprise Roles mapped to users who have been inactive/terminated for greater than 30 days.

Google Workspace Administration

• Access Requests: Review and approve Google New Account and SKU Upgrade requests.

Synchronization: Investigate and resolve Google SKU assignment mismatches and troubleshoot connector issues impacting import mappings.

When you will work:

• Monday to Friday, 8 am to 5 pm
• Hybrid schedule, 4 days in office in Wyoming, MI, with 1 day remote

What you will bring to the table:

• Technical Aptitude: Experience with or strong desire to learn Identity and Access Management (IAM) concepts.
• Problem Solving: Ability to analyze system logs, identify error patterns (e.g., HTTP 500 errors, password failures), and follow technical documentation to resolve complex issues.
• Communication: Excellent written and verbal skills to coordinate with HR, end-users, and other IT teams.
• Attention to Detail: Critical for managing user access rights and ensuring compliance during rehire and termination processes.

Preferred Technology Exposure

• ITSM Tools: Experience with ticketing systems like ServiceNow.
• Identity Governance: Exposure to Saviynt EIC, SailPoint, or similar IGA platforms.

Directory Services: Basic understanding of Active Directory, Google Workspace (Admin), or LDAP.