ENTRA ID Engineer

Entra ID EngineerDallas TX , Peoria IL , Nashville TN - HybridJob SummaryWe are seeking a highly experienced Microsoft Entra ID Engineer to design, implement, and govern enterprise identity and access management solutions in a hybrid and cloud environment. This role requires deep expertise in Zero Trust identity architecture, authentication and federation, identity governance, and security monitoring. The ideal candidate will lead IAM strategy, enforce compliance, and secure enterprise identities using Microsoft Entra ID and related security services.Key ResponsibilitiesArchitect and implement enterprise IAM solutions using Microsoft Entra ID (Azure AD)Design and enforce Zero Trust identity architecture across cloud and hybrid environmentsImplement and manage SSO, MFA, Conditional Access, and passwordless authentication (FIDO2, Windows Hello, Authenticator)Engineer and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)Configure and manage Privileged Identity Management (PIM/PAM) with RBAC and least-privilege principlesLead identity governance initiatives including access reviews, entitlement management, and lifecycle automationDevelop and enforce IAM policies aligned with NIST and regulatory frameworks (SOX, PCI, GDPR, CCPA)Integrate enterprise and third-party applications with Entra ID for secure authentication and authorizationDesign and implement identity lifecycle management (JML) processes across hybrid systemsMonitor and respond to identity threats using Microsoft Sentinel (SIEM) and Microsoft Defender for CloudLead identity-related incident response, including investigation, containment, and remediationDefine and implement Azure Landing Zone identity and security controlsCollaborate with security, infrastructure, and application teams to standardize identity controlsProvide architectural guidance and governance for enterprise IAM solutionsRequired Skills & Qualifications10+ years of IT experience with strong focus on Identity & Access Management (IAM)Extensive hands-on experience with Microsoft Entra ID (Azure AD)Deep understanding of authentication protocolsSAML, OAuth 2.0, OpenID ConnectStrong expertise in:Conditional Access policiesMFA and passwordless authenticationIdentity federation and external identity providersExperience with Privileged Identity Management (PIM/PAM)Strong knowledge of RBAC, least privilege, and identity governanceHands-on experience with Azure Sentinel and Microsoft Defender for CloudExperience implementing Zero Trust security modelsStrong understanding of hybrid identity (Entra ID + Active Directory)Experience with automation and scripting (PowerShell, ARM/Bicep, Terraform preferred)Strong troubleshooting, analytical, and incident response skills

Created: 2026-05-09