CyberArk Lead Developer(Onsite)

Job Title

CyberArk Lead Developer (Onsite)

Location

Moorestown, NJ

Duration

12 Months

Interview Type

Virtual and in-person

Note

• Must be onsite 5x a week

• Required - Locals Only

Description

We are looking for a Lead Microsoft Entra ID Developer to architect and deliver identity and access solutions on Microsoft Entra ID (formerly Azure Active Directory) for the engagement. You will lead the design of authentication, authorization, conditional access and identity governance capabilities, integrate enterprise applications, and guide a team of identity engineers.

Deliverables:

• Lead the design and implementation of Microsoft Entra ID tenant architecture, including hybrid identity with Entra Connect / Cloud Sync and federation.

• Design and enforce Conditional Access policies, MFA, passwordless authentication (FIDO2, Windows Hello, Authenticator) and risk-based access with Entra ID Protection.

• Integrate enterprise and custom applications using SAML, OAuth 2.0, OpenID Connect, SCIM and Application Proxy.

• Implement Entra ID Governance: access packages, entitlement management, access reviews, lifecycle workflows and Privileged Identity Management (PIM).

• Develop automation and integrations with Microsoft Graph API, PowerShell (Microsoft Graph SDK) and Azure Functions/Logic Apps.

• Guide application teams on registering apps, securing APIs, managed identities and service principals.

• Configure B2B collaboration, External ID (B2C/CIAM) and cross-tenant access settings where required.

• Monitor and troubleshoot sign-in and audit logs; integrate with Microsoft Sentinel / SIEM.

• Lead migrations from legacy IdPs (ADFS, on-prem directories, other cloud IdPs) to Entra ID.

• Define identity standards, security baselines and Zero Trust patterns; produce architecture and runbook documentation.

• Mentor identity engineers, run design and code reviews and coordinate with Comcast stakeholders on roadmap and delivery.

Top Skills

Required Skills & Experience

• 8–12 years in Identity & Access Management, with at least 5 years of hands-on Azure AD / Entra ID engineering.

• Expert knowledge of hybrid identity (AD DS, Entra Connect, Cloud Sync, ADFS, PTA/PHS).

• Strong experience with Conditional Access, MFA, PIM, Identity Protection and Entra ID Governance.

• Deep understanding of SAML 2.0, OAuth 2.0, OIDC, SCIM and modern authentication flows.

• Hands-on development with Microsoft Graph API and PowerShell; experience with C#/.NET or Python is a plus.

• Experience with Intune / device compliance as part of Conditional Access.

• Proven technical leadership of distributed teams in Agile environments.

• Strong communication, documentation and stakeholder management skills.

Preferred Skills

• Experience integrating Entra ID with Okta, SailPoint or CyberArk.

• Exposure to Microsoft Defender for Identity / Defender for Cloud Apps and Microsoft Sentinel.

• Infrastructure-as-Code experience (Terraform, Bicep) for identity configuration.

• Experience in large, multi-tenant enterprise environments.

Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300) – strongly preferred

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) (a plus)

Education

Bachelor's degree in Computer Science, Information Technology, Engineering or a related field, or equivalent professional experience.

Soft Skills

• Ability to lead, mentor and grow a technical team.

• Clear written and verbal communication with technical and non-technical audiences.

• Ownership mindset with strong problem-solving and decision-making skills.

• Comfortable working in a fast-paced, client-facing delivery environment.

Recruiter

Contact: Praveen - - Eight three two - Nine Nine Zero - Two four two seven