Description

Design, implement, and govern enterprise identity and access management solutions using Microsoft Entra ID in hybrid and cloud environments.

This role is hybrid.

Responsibilities

• Architect and enforce Zero Trust identity architecture across cloud and hybrid systems.
• Implement SSO, MFA, Conditional Access, and passwordless authentication (FIDO2, Windows Hello).
• Engineer identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect.
• Manage Privileged Identity Management (PIM) with RBAC and least-privilege principles.
• Lead identity governance initiatives including access reviews, entitlement management, and lifecycle automation.

Required Skills

• 10+ years of IT experience with strong focus on Identity & Access Management (IAM).
• Extensive hands-on experience with Microsoft Entra ID (Azure AD).
• Deep understanding of authentication protocols: SAML, OAuth 2.0, OpenID Connect.
• Strong expertise in Conditional Access policies, MFA, and passwordless authentication.
• Experience with identity federation and external identity providers.
• Hands-on experience with Azure Sentinel and Microsoft Defender for Cloud.
• Experience implementing Zero Trust security models and hybrid identity (Entra ID + Active Directory).
• Proficiency in automation and scripting (PowerShell, ARM/Bicep, Terraform).
• Strong troubleshooting, analytical, and incident response skills.

Preferred Skills

• Experience defining and implementing Azure Landing Zone identity and security controls.
• Knowledge of IAM policies aligned with NIST and regulatory frameworks (SOX, PCI, GDPR, CCPA).

Key Skills

Education

Any Graduate