Senior Systems Engineer Active Directory And Entra Id

Netvagas; São Paulo; On-site; BRL 180,000 - 280,000; Full time

Job summary

Netvagas in Brazil is seeking a Senior Systems Engineer to lead identity integration initiatives, focusing on Active Directory consolidation, Entra ID hybrids, and migration stability. You will design migration strategies, execute complex identity migrations, and ensure secure, compliant environments.

You will develop PowerShell automation, implement DSC/Azure Automation, and provide guidance on identity governance, CA, and cross‑team collaboration to meet security and regulatory requirements.

Qualifications

• 5+ years hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
• Proven experience with M&A integration projects, AD domain consolidations, or Entra ID tenant integrations.
• Deep knowledge of: Active Directory, Group Policy, DNS, Kerberos, PKI.
• Advanced PowerShell scripting and automation skills.
• Experience with SSO protocols such as SAML and OAuth.

Responsibilities

• Execute Active Directory and Microsoft Entra ID integration activities supporting M&A projects.
• Develop and execute detailed migration plans, including AD object migrations using industry-standard tools.
• Design and implement AD domain consolidation and Entra ID tenant integration strategies.
• Configure Entra ID services, including synchronization, authentication methods, Conditional Access, and hybrid identity integrations.
• Develop PowerShell automation for migration activities, provisioning, reporting, validation, and operational processes.
• Provide technical guidance on identity architecture, domain consolidation, and tenant integration strategies.
• Troubleshoot complex identity, authentication, synchronization, and directory service issues across on-premises and cloud environments.
• Deliver post-migration stabilization and knowledge transfer.

Skills

Active Directory

Entra ID

PowerShell

Automation

M&A integration

Hybrid Identity

Education

Bachelor's degree in Computer Science / MIS / IT

Tools

PowerShell DSC

Azure AD Connect / Cloud Sync

Azure Automation

Job description

The Senior Systems Engineer will lead identity integration initiatives supporting M&A projects, with a focus on:

• Active Directory domain consolidations


• Hybrid identity environments


• Identity migration and post-migration stabilization

The engineer will work within Insi's IAM Directory Services team, designing migration strategies, executing complex identity migrations, and ensuring stable, secure, and compliant environments.

Key Responsibilities

Identity Integration & Migration

• Execute Active Directory and Microsoft Entra ID integration activities supporting M&A projects.


• Develop and execute detailed migration plans, including AD object migrations using industry-standard tools.


• Design and implement AD domain consolidation and Entra ID tenant integration strategies.


• Configure Entra ID services, including synchronization, authentication methods, Conditional Access, and hybrid identity integrations.


• Support identity lifecycle management throughout migration projects.

PowerShell & Automation

• Develop PowerShell automation for:Migration activitiesProvisioningReportingValidationOperational processes


• Migration activities


• Reporting


• Validation


• Operational processes


• Use automation tools such as PowerShell DSC, Azure Automation, and Task Scheduler.

Subject Matter Expertise

• Provide technical guidance on identity architecture, domain consolidation, and tenant integration strategies.


• Troubleshoot complex identity, authentication, synchronization, and directory service issues across on-premises and cloud environments.


• Perform Active Directory health assessments and implement best-practice recommendations.


• Advise IT and security teams on identity-related compliance, governance, and risk mitigation.


• Create and maintain technical documentation, migration runbooks, architecture diagrams, and operational procedures.

Infrastructure & Operational Support

• Support DNS, Group Policy, PKI, Kerberos, and authentication-related configurations during migrations.


• Monitor identity services following deployment and implement continuous improvement actions.


• Deliver post-migration stabilization and knowledge transfer.


• Provide ongoing operational support for identity environments.


• Collaborate with cross-functional teams to ensure integrations meet security and regulatory requirements.

Technical Environment

Core Platforms

• Windows Server 2016/2019/2022


• Active Directory Domain Services (AD DS)


• PowerShell

Identity & Security

• Identity Lifecycle Management


• M&A Domain Consolidation


• Hybrid Identity Integration


• Conditional Access


• Identity Governance


• Azure AD Identity Protection

Automation

• PowerShell DSC


• Task Scheduler

Required Qualifications

• 5+ years of hands-on experience with Microsoft Active Directory and Microsoft Entra ID.


• Proven experience with M&A integration projects, AD domain consolidations, or Entra ID tenant integrations.


• Deep knowledge of:Active DirectoryGroup PolicyDNSKerberosPKI


• Active Directory


• Group Policy


• DNS


• PKI


• Strong expertise in Entra Connect / Cloud Sync and hybrid identity architectures.


• Strong understanding of Conditional Access, MFA, identity synchronization, and identity governance.


• Advanced PowerShell scripting and automation skills.


• Demonstrated ability to troubleshoot, monitor, and analyze event logs in complex identity environments.


• Experience with SSO protocols such as SAML and OAuth.


• Excellent written and verbal communication skills.


• Ability to work independently in an enterprise environment.


• Bachelor's degree in Computer Science, MIS, Information Technology, or a related field is preferred.

Nice to Have

• Experience with Azure AD B2B/B2C and external identity collaboration.


• Familiarity with Zero Trust security models.


• Experience with Microsoft Defender for Identity.


• Microsoft certifications such as:Microsoft Certified: Identity and Access AdministratorAzure Solutions Architect Expert


• Microsoft Certified: Identity and Access Administrator


• Azure Solutions Architect Expert


• Knowledge of Infrastructure as Code (IaC) tools such as Terraform or ARM templates.


• Exposure to containerized workloads and identity integration with Kubernetes.

Senior systems engineer active directory and entra id BRASIL, BR, BR