Entra ID MFA & Identity Security Engineer

CareCone Group; Sydney; On-site; AUD 120,000 - 170,000; Full time

Job summary

CareCone Group is seeking an experienced Entra ID MFA & Identity Security Engineer to design, implement, and support enterprise-scale identity security solutions across Azure environments in Sydney. The role focuses on Entra ID MFA, Conditional Access, identity governance, and hybrid identity integration to support large-scale migrations and ongoing security compliance.

The position collaborates with security, infrastructure, workplace, and application teams to ensure secure access across cloud

Responsibilities

• Design, implement, and support Microsoft Entra ID solutions, including authentication, authorization, and identity governance capabilities.
• Lead large-scale MFA rollout and migration programs for enterprise environments with thousands of users across multiple business units.
• Configure and manage Microsoft Entra ID MFA, Authentication Methods, Self-Service Password Reset (SSPR), and Identity Protection policies.
• Develop and implement Conditional Access policies aligned with Zero Trust security principles and organizational security requirements.
• Possess strong understanding of Entra ID architecture, hybrid identity, federation, synchronization, and cloud-native identity solutions.
• Collaborate with security, infrastructure, workplace, and application teams to integrate applications with Entra ID authentication services.
• Conduct identity security assessments and recommend improvements to strengthen access controls and reduce security risks.
• Troubleshoot complex authentication, federation, MFA, and access-related issues across large enterprise environments.
• Develop technical documentation, architecture diagrams, implementation plans, and operational runbooks for identity services.
• Support compliance, audit, and governance initiatives while applying identity security best practices across Azure IaaS, PaaS, and SaaS platforms.

Job description

Entra ID MFA & Identity Security Engineer

Role: Entra ID MFA & Identity Security Engineer

Role: Entra ID MFA & Identity Security Engineer

Location: Sydney

Role Summary

• Experienced Entra ID and Identity Security Engineer responsible for designing, implementing, and supporting enterprise-scale Multi-Factor Authentication (MFA), Conditional Access, and identity security solutions across large and complex Azure environments.

Key Responsibilities

• Design, implement, and support Microsoft Entra ID solutions, including authentication, authorization, and identity governance capabilities.
• Lead large-scale MFA rollout and migration programs for enterprise environments with thousands of users across multiple business units.
• Configure and manage Microsoft Entra ID MFA, Authentication Methods, Self-Service Password Reset (SSPR), and Identity Protection policies.
• Develop and implement Conditional Access policies aligned with Zero Trust security principles and organizational security requirements.
• Possess strong understanding of Entra ID architecture, hybrid identity, federation, synchronization, and cloud-native identity solutions.
• Collaborate with security, infrastructure, workplace, and application teams to integrate applications with Entra ID authentication services.
• Conduct identity security assessments and recommend improvements to strengthen access controls and reduce security risks.
• Troubleshoot complex authentication, federation, MFA, and access-related issues across large enterprise environments.
• Develop technical documentation, architecture diagrams, implementation plans, and operational runbooks for identity services.
• Support compliance, audit, and governance initiatives while applying identity security best practices across Azure IaaS, PaaS, and SaaS platforms.