Description

Establish Microsoft Entra ID as the central control plane for identity governance across multi-cloud and on-premises environments.

This role is remote.

Responsibilities

• Architect end-to-end Joiner, Mover, and Leaver (JML) workflows using Microsoft Entra ID Lifecycle Workflows for zero-touch provisioning and de-provisioning.
• Manage Role-Based Access Control (RBAC), Conditional Access policies, and PIM configurations using Terraform and version control.
• Implement Privileged Identity Management (PIM), Just-in-Time (JIT) access, and Workload Identity Federation for secure, scalable access.
• Write production-quality Python, Go, or PowerShell code to interact with the Microsoft Graph API for complex identity automation tasks.
• Define hybrid identity integrations between Entra ID and on-premises Active Directory, ensuring all access activities are logged and audited.

Required Skills

• 5+ years of engineering experience with a specific focus on Identity and Access Management (IAM).
• Deep expertise in Microsoft Entra ID (formerly Azure AD), including Enterprise Applications, App Registrations, and Governance.
• Proven experience writing and managing complex Terraform modules for RBAC and cloud resource deployment.
• Proficiency in Python, Go, or advanced PowerShell with extensive experience interacting with REST APIs, specifically the Microsoft Graph API.
• Strong understanding of modern authentication protocols including OIDC, OAuth2, and SAML.
• Experience synchronizing identities across multi-cloud environments (Azure and GCP).

Preferred Skills

• Microsoft Security/Identity Certifications (e.g., SC-300, AZ-500).
• Experience converting legacy Active Directory group-based access into dynamic, attribute-based access controls.
• Experience with CI/CD pipelines (GitHub Actions, Azure DevOps) for deploying Identity-as-Code.

Key Skills

Education

Any Graduate