Description

Job Description

Must-Have Technical/Functional Skills

Lead Consulting Experience: Demonstrated experience in cybersecurity consulting or IAM engineering, with a proven track record of leading client-facing engagements.

Entra ID Expertise: Deep, hands-on experience hardening enterprise Microsoft Entra ID (formerly Azure AD) environments.

Phishing-Resistant MFA Blueprinting: Proven experience deploying FIDO2 security keys, Windows Hello for Business (WHfB), or Certificate-Based Authentication (CBA) at scale across a large user base.

Conditional Access Mastery: Advanced knowledge of building, testing, and troubleshooting complex Conditional Access architectures.

Roles & Responsibilities

Client Leadership & Communication

Lead and facilitate high-stakes client calls, workshops, and steering committee meetings to drive alignment on MFA hardening strategies.

Translate complex Microsoft Entra ID technical architectures into clear, business-oriented risk-reduction outcomes for executive stakeholders.

Manage client expectations, address concerns regarding user friction, and proactively resolve project roadblocks.

Draft technical roadmaps, deployment playbooks, and change-management communication frameworks for the client.

Technical Execution & Architecture

Drive the design, configuration, and rollout of phishing-resistant MFA methods within Microsoft Entra ID, including:

FIDO2 security keys (for example, YubiKeys)

Windows Hello for Business (WHfB)

Microsoft Entra Certificate-Based Authentication (CBA)

Application onboarding to Entra ID or ForgeRock using OIC, SAML, or a reverse-proxy approach.

Drive delivery activities and guide the team on the strategic migration approach.

Design and enforce strict Entra ID Conditional Access policies, including authentication strength, device compliance, and risk-based sign-in requirements.

Orchestrate the decommissioning of legacy, phishable authentication methods, including SMS, voice, and standard Microsoft Authenticator push notifications without number matching.

Evaluate and mitigate edge cases such as break-glass accounts, service accounts, and access from non-corporate devices

Key Skills

Education

Any Graduate