Microsoft Entra ID / IAM Engineer (Remote)

Microsoft Entra ID Engineer
  
Position Overview
We are seeking a Microsoft Entra ID Engineer to support the implementation and ongoing maturation of enterprise identity and access management capabilities. This is a hands-on engineering role focused on configuring Entra capabilities, implementing security controls, troubleshooting issues, and supporting modern identity and authentication initiatives.
 
Key Responsibilities

• Configure and implement Microsoft Entra ID capabilities based on defined requirements.
• Design and implement Conditional Access policies and authentication controls.
• Support MFA, passwordless authentication, passkeys, and Windows Hello for Business (WHfB) initiatives.
• Configure Azure Management Groups and RBAC to support appropriate access and governance.
• Manage Enterprise Applications, App Registrations, permissions, and consent.
• Implement application governance, including review of risky or unused applications.
• Support B2B, cross-tenant access, and partner identity scenarios.
• Configure Entitlement Management, Access Packages, catalogs, approvals, access expiration, and access reviews.
• Support governance of service principals and other non-human identities.
• Troubleshoot identity, authentication, access, and configuration issues.
• Collaborate with internal engineering and cybersecurity teams to determine effective implementation approaches.
• Develop configuration documentation, runbooks, and security/GRC documentation.
• Communicate technical changes clearly to stakeholders and end users.

• 5+ years of hands-on experience with Microsoft Entra ID / Azure AD implementation.
• Strong experience with Conditional Access, MFA, and modern authentication.
• Experience with Azure RBAC and Management Groups.
• Hands-on experience with Enterprise Applications and App Registrations.
• Experience with B2B / cross-tenant access and partner identity scenarios.
• Experience with Entitlement Management / Access Packages and Access Reviews.
• Experience using PowerShell and/or Microsoft Graph for identity administration or automation.
• Strong troubleshooting, documentation, and communication skills.

• Experience with greenfield or identity transformation initiatives.
• Knowledge of Zero Trust, PIM, governance, and access review practices.
• Experience in GxP, SOX, or other regulated environments.
• Familiarity with Microsoft Sentinel and related security capabilities.
  
  EEO:
  “Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”