Entra ID Security Engineer

Job Description

We are seeking an experienced Entra ID Security Engineer to design, implement, and manage secure identity and access management solutions within the Microsoft Azure ecosystem. The ideal candidate will have strong expertise in Microsoft Entra ID (formerly Azure Active Directory), authentication and authorization, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and identity governance.

The engineer will collaborate with security, infrastructure, DevOps, and application teams to strengthen cloud security, ensure compliance, and maintain reliable identity services.

Key Responsibilities

Design, implement, and manage Microsoft Entra ID (Azure AD) solutions for secure authentication and authorization.

Manage application onboarding, app registrations, enterprise applications, and Role-Based Access Control (RBAC).

Implement and troubleshoot MFA, SSO, and Conditional Access policies.

Configure and troubleshoot authentication protocols, including OAuth 2.0, OpenID Connect (OIDC), and SAML.

Configure access policies based on user identity, location, device compliance, and security requirements.

Implement identity governance, Privileged Identity Management (PIM), and privileged access controls.

Utilize Microsoft Sentinel (Azure Sentinel) for security monitoring, alerting, incident investigation, and response automation.

Develop automation scripts using PowerShell and Azure CLI to streamline IAM operations.

Provide production support and troubleshoot identity and access-related incidents.

Collaborate with cross-functional teams to implement secure, scalable, and compliant cloud security solutions.

Apply Microsoft Azure security best practices and stay current with emerging threats and platform updates.

Support DevOps and application development teams with identity integration and security requirements.

Required Qualifications

5+ years of experience in Azure AD / Microsoft Entra ID security engineering or Identity and Access Management (IAM).

Strong hands-on experience with Microsoft Entra ID, application registrations, enterprise applications, and access management.

Experience implementing MFA, SSO, Conditional Access, and RBAC.

In-depth knowledge of OAuth 2.0, OpenID Connect (OIDC), and SAML authentication protocols.

Experience with Azure AD B2C / Microsoft Entra External ID and related authentication components.

Strong scripting and automation skills using PowerShell and Azure CLI.

Experience with Microsoft Sentinel for security monitoring, alerting, and incident response automation.

Understanding of cloud security principles, identity governance, and privileged access management.

Strong troubleshooting, analytical, communication, and collaboration skills.

Ability to support production environments and resolve IAM-related security issues.