About this role
Microsoft Entra ID (Advanced Implementation)
Implement and optimize Conditional Access policies based on approved designsSupport and operationalize:Risk‑based access policiesAuthentication Strengths and phishing‑resistant MFALead operational implementation of Privileged Identity Management (PIM):Role assignmentsApproval workflowsJust‑in‑Time access configurationSecure application and workload identities:App registrations and service principalsOAuth permission governance
On‑Prem Active Directory (Security & Hardening)
Support and enforce AD security best practices:Tiered admin model (Tier 0 / 1 / 2)Privileged account separationLead AD hardening activities:LAPSProtected UsersDelegation and admin access restrictionsTroubleshoot complex AD security and authentication issuesHybrid Identity & Integration
Support Entra Connect configuration and lifecycle managementAssist in evaluating authentication models and hybrid trust decisionsSupport integration of identity with:Azure subscriptionsThird‑party SaaS applicationsThreat Detection & Operations
Support CyberDefence team for Identity (MDI) investigations and tuningAct as a technical escalation point during identity‑related incidentsCollaboration & Mentoring
Mentor mid‑level engineers and provide technical guidanceParticipate in design reviews and provide implementation feedbackWork closely with Identity Architects, Security, and Platform teams 8–10 years of experience in identity and access managementStrong hands‑on experience with:Microsoft Entra ID P2Conditional Access at scalePrivileged Identity ManagementActive Directory securityExperience supporting hybrid AD environmentsAdvanced PowerShell scripting and automationStrong understanding of identity‑based attack techniques and mitigationsSolid grasp of Zero Trust principles (implementation‑focused) Experience with:Concepts around IGADefender for IdentityPasswordless authentication (FIDO2, WHfB)VDI or shared device environmentsCertifications:SC‑300AZ‑500Microsoft Security certifications