Entra ID Security Engineer / Azure Identity Security Engineer

We are seeking a highly skilled Entra ID Security Engineer with 8–10 years of experience and strong expertise in Microsoft Entra ID (formerly Azure Active Directory), Identity and Access Management (IAM), authentication, authorization, and Azure security solutions.

The ideal candidate will be responsible for designing, implementing, and managing secure identity solutions across the enterprise. This role will focus heavily on application onboarding, MFA, SSO, Conditional Access, RBAC, identity governance, PIM, authentication protocols, and security monitoring.

The candidate should have strong troubleshooting and production support capabilities and be comfortable collaborating with security, DevOps, development, infrastructure, and application teams.

Key Responsibilities

Microsoft Entra ID / Azure AD

• Design, implement, configure, and manage Microsoft Entra ID / Azure Active Directory solutions.
• Ensure secure and efficient authentication and authorization processes aligned with enterprise security best practices.
• Drive application onboarding activities, including:
• Application Registration
• Enterprise Application Configuration
• Application Permissions
• Role-Based Access Control (RBAC)
• Manage identities, roles, permissions, and access policies across Azure environments.

Authentication & Authorization

• Lead the implementation and management of Multi-Factor Authentication (MFA).
• Implement and manage enterprise Single Sign-On (SSO) solutions.
• Configure and troubleshoot authentication and authorization protocols, including:
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML
• Troubleshoot authentication failures and authorization issues.
• Ensure authentication solutions are secure, scalable, and compliant with enterprise requirements.

Conditional Access

• Design, configure, and manage Conditional Access policies.
• Control access based on:
• User identity
• Geographic location
• Device compliance
• Security conditions
• Other contextual factors
• Monitor and optimize Conditional Access policies to balance security and user experience.
• Troubleshoot access issues resulting from Conditional Access policies.

Identity Governance & Privileged Access

• Establish and maintain enterprise Identity Governance frameworks.
• Implement and manage Privileged Identity Management (PIM).
• Manage elevated and privileged access.
• Implement least-privilege access principles.
• Review and audit privileged access and role assignments.
• Support access governance and compliance requirements.

Azure Security & Monitoring

• Implement security best practices across Microsoft Azure products, services, and solutions.
• Utilize Microsoft Sentinel / Azure Sentinel for security monitoring and incident detection.
• Create and manage security alerts.
• Develop automation scripts and workflows for incident response.
• Investigate identity-related security events and vulnerabilities.
• Support security incident response and remediation activities.

Production Support

• Provide production support for identity, authentication, and authorization services.
• Troubleshoot and resolve IAM-related production incidents.
• Investigate security incidents and implement corrective actions.
• Work with cross-functional teams to ensure identity solutions remain secure, compliant, and highly available.
• Perform root-cause analysis for recurring identity and authentication issues.

Collaboration & DevOps

• Collaborate with:
• Security Teams
• DevOps Teams
• Development Teams
• Infrastructure Teams
• Application Teams
• Support application onboarding and identity integration requirements.
• Demonstrate a working understanding of DevOps tools, processes, and application deployment requirements.
• Partner with development teams to integrate secure authentication and authorization into applications.

Continuous Improvement

• Stay current with Microsoft Entra ID and Azure updates.
• Monitor emerging security threats, vulnerabilities, and identity security trends.
• Recommend improvements to strengthen the organization''s identity security posture.
• Continuously improve IAM processes, controls, automation, and operational efficiency.

Required Technical Skills

Microsoft Azure / Entra ID

• Microsoft Entra ID
• Azure Active Directory (Azure AD)
• Microsoft Azure
• Azure Identity & Access Management
• Azure Security
• Application Registration
• Enterprise Applications
• RBAC
• Conditional Access
• MFA
• SSO
• Identity Governance
• Privileged Identity Management (PIM)

Authentication & Federation

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML
• Authentication & Authorization
• Identity Federation
• Application Authentication

Security & Monitoring

• Microsoft Sentinel / Azure Sentinel
• Security Monitoring
• Security Alerts
• Incident Response
• Identity Security
• Access Governance
• Privileged Access Management

Automation & Scripting

• Windows PowerShell
• PowerShell scripting
• Automation
• Security automation / incident response automation

Required Qualifications

• 8–10 years of relevant IT/security experience.
• Strong hands-on experience with Microsoft Entra ID / Azure AD.
• Strong understanding of enterprise IAM and identity security.
• Proven experience implementing MFA and SSO.
• Strong experience configuring Conditional Access policies.
• Hands-on experience with RBAC and PIM.
• Strong knowledge of OAuth 2.0, OpenID Connect, and SAML.
• Experience onboarding and integrating enterprise applications with Entra ID.
• Experience with Microsoft Sentinel / Azure Sentinel.
• Strong PowerShell scripting and automation skills.
• Experience providing production support for identity and security solutions.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work effectively with security, development, DevOps, and infrastructure teams.