ENTRA ID Engineer

Entra ID Engineer
Dallas TX  , Peoria IL , Nashville TN - Hybrid

Job Summary

We are seeking a highly experienced Microsoft Entra ID Engineer to design, implement, and govern enterprise identity and access management solutions in a hybrid and cloud environment. This role requires deep expertise in Zero Trust identity architecture, authentication and federation, identity governance, and security monitoring. The ideal candidate will lead IAM strategy, enforce compliance, and secure enterprise identities using Microsoft Entra ID and related security services.

Key Responsibilities

• Architect and implement enterprise IAM solutions using Microsoft Entra ID (Azure AD)
• Design and enforce Zero Trust identity architecture across cloud and hybrid environments
• Implement and manage SSO, MFA, Conditional Access, and passwordless authentication (FIDO2, Windows Hello, Authenticator)
• Engineer and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
• Configure and manage Privileged Identity Management (PIM/PAM) with RBAC and least-privilege principles
• Lead identity governance initiatives including access reviews, entitlement management, and lifecycle automation
• Develop and enforce IAM policies aligned with NIST and regulatory frameworks (SOX, PCI, GDPR, CCPA)
• Integrate enterprise and third-party applications with Entra ID for secure authentication and authorization
• Design and implement identity lifecycle management (JML) processes across hybrid systems
• Monitor and respond to identity threats using Microsoft Sentinel (SIEM) and Microsoft Defender for Cloud
• Lead identity-related incident response, including investigation, containment, and remediation
• Define and implement Azure Landing Zone identity and security controls
• Collaborate with security, infrastructure, and application teams to standardize identity controls
• Provide architectural guidance and governance for enterprise IAM solutions

Required Skills & Qualifications

• 10+ years of IT experience with strong focus on Identity & Access Management (IAM)
• Extensive hands-on experience with Microsoft Entra ID (Azure AD)
• Deep understanding of authentication protocols: SAML, OAuth 2.0, OpenID Connect
• Strong expertise in:
  • Conditional Access policies
  • MFA and passwordless authentication
  • Identity federation and external identity providers
• Experience with Privileged Identity Management (PIM/PAM)
• Strong knowledge of RBAC, least privilege, and identity governance
• Hands-on experience with Azure Sentinel and Microsoft Defender for Cloud
• Experience implementing Zero Trust security models
• Strong understanding of hybrid identity (Entra ID + Active Directory)
• Experience with automation and scripting (PowerShell, ARM/Bicep, Terraform preferred)
• Strong troubleshooting, analytical, and incident response skills