Microsoft Entra ID (Azure AD) Security Engineer

Job Description:

Role Description:

• Design, implement, and manage Microsoft Entra ID (Azure AD) solutions for secure identity and access management.
• Ensure secure authentication and authorization aligned with industry best practices.
• Implement enterprise identity, authentication, authorization, MFA, SSO, and identity governance solutions.
• Support secure, scalable, and compliant Azure AD environments.
• Collaborate with security, DevOps, and application teams to strengthen identity security.

Must-Have Technical Skills:

• Strong expertise in:
  • Microsoft Entra ID (Azure Active Directory)
  • Identity and Access Management (IAM)
  • Authentication and Authorization
• Hands-on experience with:
  • Application onboarding
  • App registration
  • Enterprise applications
  • Role-Based Access Control (RBAC)
• Strong experience implementing:
  • Multi-Factor Authentication (MFA)
  • Single Sign-On (SSO)
• Expertise in configuring and troubleshooting authentication protocols:
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • SAML
• Experience configuring and managing:
  • Conditional Access Policies
  • Device-based access controls
  • Location-based access controls
• Strong understanding of Azure security services and best practices.
• Hands-on experience with:
  • Azure Sentinel
  • Security monitoring
  • Alert creation
  • Incident response automation
• Experience with:
  • Identity Governance
  • Privileged Identity Management (PIM)
  • Elevated access management
• Experience supporting production IAM environments and resolving security incidents.
• Basic understanding of DevOps tools and application deployment processes.

Roles & Responsibilities:

• Design, implement, and manage Microsoft Entra ID (Azure AD) solutions.
• Configure secure authentication and authorization for enterprise applications.
• Onboard applications through:
  • App registration
  • Enterprise application setup
  • RBAC configuration
• Implement and manage:
  • Multi-Factor Authentication (MFA)
  • Single Sign-On (SSO)
• Configure and troubleshoot:
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • SAML
• Design and manage Conditional Access Policies based on:
  • User identity
  • Device compliance
  • Geographic location
  • Risk conditions
• Collaborate with cross-functional teams to resolve IAM-related issues.
• Implement Azure security best practices across identity services.
• Monitor security events using Azure Sentinel.
• Create alerts and automation scripts for incident detection and response.
• Provide production support and resolve identity and security incidents.
• Implement and maintain Identity Governance and Privileged Identity Management (PIM).
• Stay current with Microsoft Azure security updates, threats, and best practices.
• Partner with DevOps and development teams to integrate secure identity solutions.

Generic Managerial Skills:

• Excellent verbal and written communication skills.
• Strong analytical and troubleshooting abilities.
• Effective stakeholder and cross-functional collaboration skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Strong ownership, accountability, and customer-focused mindset.
• Ability to mentor team members and share technical knowledge.
• Proactive approach to continuous learning and security improvements.
• Strong problem-solving and decision-making skills.