Microsoft Entra ID / IAM Engineer (Remote)

Microsoft Entra ID Engineer
  
Position Overview
We are seeking aMicrosoft Entra ID Engineer to support the implementation and ongoing maturation of enterprise identity and access management capabilities. This is ahands-on engineering role focused on configuring Entra capabilities, implementing security controls, troubleshooting issues, and supporting modern identity and authentication initiatives.
 
Key Responsibilities

• Configure and implementMicrosoft Entra ID capabilities based on defined requirements.
• Design and implementConditional Access policies and authentication controls.
• SupportMFA, passwordless authentication, passkeys, and Windows Hello for Business (WHfB) initiatives.
• ConfigureAzure Management Groups and RBAC to support appropriate access and governance.
• ManageEnterprise Applications, App Registrations, permissions, and consent.
• Implement application governance, including review of risky or unused applications.
• SupportB2B, cross-tenant access, and partner identity scenarios.
• ConfigureEntitlement Management, Access Packages, catalogs, approvals, access expiration, and access reviews.
• Support governance ofservice principals and other non-human identities.
• Troubleshoot identity, authentication, access, and configuration issues.
• Collaborate with internal engineering and cybersecurity teams to determine effective implementation approaches.
• Developconfiguration documentation, runbooks, and security/GRC documentation.
• Communicate technical changes clearly to stakeholders and end users.

• 5+ years of hands-on experience with Microsoft Entra ID / Azure AD implementation.
• Strong experience withConditional Access, MFA, and modern authentication.
• Experience withAzure RBAC and Management Groups.
• Hands-on experience withEnterprise Applications and App Registrations.
• Experience withB2B / cross-tenant access and partner identity scenarios.
• Experience withEntitlement Management / Access Packages and Access Reviews.
• Experience usingPowerShell and/or Microsoft Graph for identity administration or automation.
• Strong troubleshooting, documentation, and communication skills.

• Experience withgreenfield or identity transformation initiatives.
• Knowledge ofZero Trust, PIM, governance, and access review practices.
• Experience inGxP, SOX, or other regulated environments.
• Familiarity withMicrosoft Sentinel and related security capabilities.
  
  EEO:
  “Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”