Entra ID MFA & Identity Security Engineer

XPT Software Australia; Sydney; On-site; AUD 130,000 - 170,000; Full time

Job summary

XPT Software Australia is seeking an experienced Entra ID and Identity Security Engineer to design, implement, and support enterprise-scale MFA and identity security solutions across large Azure environments.

You will lead MFA rollout programs, configure Identity Protection policies, and collaborate with cross-functional teams to strengthen access controls and governance. The role requires deep expertise in Entra ID architecture and hybrid identity.

Qualifications

• Experience designing and implementing Entra ID MFA and conditional access.
• Strong understanding of hybrid identity and cloud-native identity solutions.
• Ability to develop runbooks, architecture diagrams and implementation plans.

Responsibilities

• Design, implement, and support Microsoft Entra ID authentication and authorization.
• Lead large-scale MFA rollout and migration programs for enterprise environments.
• Configure Entra ID MFA, Authentication Methods, SSPR, and Identity Protection policies.
• Develop Conditional Access policies aligned with Zero Trust principles.
• Understand Entra ID architecture, hybrid identity, federation and synchronization.
• Collaborate with security, infrastructure, workplace, and applications teams to integrate apps with Entra ID.
• Conduct identity security assessments and recommend improvements to access controls.
• Troubleshoot authentication, federation, MFA, and access-related issues in large environments.
• Create technical documentation, architecture diagrams, and runbooks for identity services.
• Support compliance, audit, and governance initiatives across Azure IaaS, PaaS, SaaS.

Skills

Entra ID

MFA rollout

Conditional Access

Identity governance

Azure AD/Entra architecture

Zero Trust

Tools

Azure AD

SSPR

Federation

Job description

Role Summary

Experienced Entra ID and Identity Security Engineer responsible for designing, implementing, and supporting enterprise-scale Multi-Factor Authentication (MFA), Conditional Access, and identity security solutions across large and complex Azure environments.

Role Summary

Experienced Entra ID and Identity Security Engineer responsible for designing, implementing, and supporting enterprise-scale Multi-Factor Authentication (MFA), Conditional Access, and identity security solutions across large and complex Azure environments.

Key Responsibilities

• Design, implement, and support Microsoft Entra ID solutions, including authentication, authorization, and identity governance capabilities.
• Lead large-scale MFA rollout and migration programs for enterprise environments with thousands of users across multiple business units.
• Configure and manage Microsoft Entra ID MFA, Authentication Methods, Self-Service Password Reset (SSPR), and Identity Protection policies.
• Develop and implement Conditional Access policies aligned with Zero Trust security principles and organizational security requirements.
• Possess strong understanding of Entra ID architecture, hybrid identity, federation, synchronization, and cloud-native identity solutions.
• Collaborate with security, infrastructure, workplace, and application teams to integrate applications with Entra ID authentication services.
• Conduct identity security assessments and recommend improvements to strengthen access controls and reduce security risks.
• Troubleshoot complex authentication, federation, MFA, and access-related issues across large enterprise environments.
• Develop technical documentation, architecture diagrams, implementation plans, and operational runbooks for identity services.
• Support compliance, audit, and governance initiatives while applying identity security best practices across Azure IaaS, PaaS, and SaaS platforms.