Senior Azure/Entra ID Engineer

Location: San Francisco CA/ Cincinnati OH- Onsite

The Azure / Entra ID L3 Engineer is a senior technical role responsible for the hands-on design translation, build, configuration, and advanced troubleshooting of Microsoft Entra ID (formerly Azure Active Directory) identity and security services.

This role acts as the technical execution arm of the IAM Architect, converting high-level identity designs into secure, scalable, and production-ready implementations. The engineer will lead complex operational issues (L3), drive automation, and ensure identity security controls are implemented in line with Zero Trust and Microsoft security best practices.

Required Technical Skills Core Microsoft Identity

• Microsoft Entra ID (Azure AD)

• Conditional Access

• Identity Protection

• MFA & Passwordless (FIDO2, WHfB)

• Privileged Identity Management (PIM)

• Access Reviews & Entitlement Management

Security

• Zero Trust Architecture

• Identity Threat Detection

• RBAC & Least Privilege

• Defender for Identity / Cloud Apps

Integration

• SAML 2.0, OAuth2, OpenID Connect

• Enterprise Applications

• Hybrid identity (AD Connect / Cloud Sync)

• Intune device compliance

Troubleshooting

• Sign-in logs & Audit logs

• KQL

• Root Cause Analysis

• Microsoft Support escalation

Automation

• PowerShell

• Microsoft Graph API

• Azure CLI

• Terraform / Bicep / ARM

Required Experience

• 6 10+ years overall IT experience

• 4 6+ years hands-on Microsoft identity engineering

• Strong L3 production support experience

• Experience working in large enterprise tenants (50k+ users)

• Experience with globally distributed environments