Senior Azure Entra ID / IAM SME

Location: Berlin, CT

Onsite

Experience

10+ years overall IT experience with 5+ years of hands-on experience in Microsoft Entra ID (Azure Active Directory), Identity & Access Management (IAM), and Enterprise Security.

Role Overview

We are seeking a highly skilled Azure Entra ID SME to assist with implementation of IAM best practices. This role requires close collaboration with Cyber Security Architects, Security Governance teams, Risk & Compliance stakeholders, and Application Owners to define IAM standards, establish security policies, and implement modern identity controls.

The ideal candidate will bring deep expertise in Microsoft Entra ID, Conditional Access, Identity Governance, Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Zero Trust Architecture, and cloud identity security.

Key Responsibilities

Identity & Access Management Strategy

Partner with Cyber Security Architects and Policy Owners to define and evolve enterprise IAM strategy, standards, and governance frameworks.

Translate security and compliance requirements into technical IAM controls and implementation roadmaps.

Microsoft Entra ID Administration & Engineering

Design & implement IAM controls for Microsoft Entra ID services and capabilities.

Implement and / or improve controls for (including but not limited to):

Conditional Access Policies

MFA and Passwordless Authentication

Identity Protection

Configure and support Azure AD Connect and synchronization with on-premises Active Directory.

Identity Governance & Privileged Access

Implement (including but not limited to):

Entra ID Identity Governance

Access Reviews

Entitlement Management

Lifecycle Workflows

Privileged Identity Management (PIM)

Role-based and attribute-based access controls (RBAC/ABAC).

Establish least-privilege access models and privileged access controls.

Security Policy Implementation

Collaborate with Cyber Security teams to implement:

Identity Protection Policies

Conditional Access Frameworks

Risk-based Access Controls

Compliance and Audit Requirements

Hypercare Support

Provide L3/L4 support for identity-related incidents and escalations.

Perform root cause analysis and lead remediation activities.

Recommend enhancements for improving security posture, operational efficiency, and user experience.

Required Skills & Experience

Technical Expertise

Strong knowledge of Microsoft Entra ID (Azure AD).

Hands-on experience with:

Conditional Access

Identity Protection

MFA

Passwordless Authentication

PIM

RBAC

Identity Governance

Access Reviews

Entitlement Management

Azure AD Connect

Hybrid Identity

Authentication & Identity Protocols

SAML

OAuth 2.0

OpenID Connect (OIDC)

LDAP

Federation Services

Security & Compliance

Zero Trust Security Architecture

IAM Governance

Access Control Frameworks

Segregation of Duties (SoD)

Security Audits

Risk Management

Regulatory Compliance

Desired Leadership Attributes

Strong stakeholder management skills.

Experience working with Cyber Security and Compliance teams.

Excellent communication and documentation skills.

Experience with IAM transformation and modernization initiatives.

Regards,

Ram

Celersoft LLC