Entra ID Engineer

Insight Global; Toronto; Hybrid; CAD 80,000 - 100,000; Full time

Job summary

A leading recruitment firm is seeking two Entra ID Engineers for a hybrid role in Toronto. You will work on significant projects at one of the big 5 banks, focusing on workload identity enhancements, lifecycle management, and synchronizing on-prem Active Directory with Entra ID. Ideal candidates will have strong expertise, hands-on engineering experience, and the ability to drive initiatives independently. Competitive remuneration and contract extensions available.

Qualifications

• Expertise in workload identities, SSO, service principals, admin units.
• Experience with conditional access policies and lifecycle management.
• Strong architecture knowledge to design end-to-end solutions.

Responsibilities

• Work on workload identity enhancements and deploy additional features.
• Develop processes for provisioning and updating Entra ID objects.
• Synchronize on-prem Active Directory with Entra ID.

Skills

Expertise in Entra ID

Hands-on engineering experience

Ability to lead initiatives

Excellent communication skills

Scripting (SQL, Bash, Python)

Job description

Job Description

We are looking for 2 Entra ID Engineers (previously known as Azure AD) to join one of the big 5 banks on a 12-month contract plus extensions. This role is hybrid in Toronto, every Tuesday and 2nd Friday of the month.

• Work on projects related:
  • Workload Identity Enhancements
    • Create an automated enterprise-wide deployment model.
    • Deploy additional features for functional IDs in the cloud.
    • Centralize governance and alerting on excessive permissions for thousands of workload identities.
  • Lifecycle Management in Entra ID
    • Develop and implement processes for provisioning (groups, roles, accounts/IDs) and updating Entra ID objects.
    • Add new attributes to Entra ID objects to support identification, linking, and deprovisioning.
    • Enhance existing Entra ID group management processes.
    • Update ServiceNow catalog.
  • Synchronize on-prem Active Directory with Entra ID for cloud integration.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail]. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Expertise in Entra ID:
  • Workload identities, SSO, service principals, admin units, infrastructure.
  • Conditional access policies, lifecycle management.
  • Strong architecture knowledge and ability to design end-to-end solutions.
• Hands‑on engineering experience:
  • Automating manual processes.
  • Building, testing, and documenting technical solutions.
  • Creating and managing workload identities, service principals, conditional access policies, Graph API permissions.
• Ability to lead initiatives, make recommendations, and drive projects independently.
• Excellent communication and presentation skills.
• Experience with on‑prem Active Directory and hybrid environments.
• Previous work in financial institutions or large enterprise environments.
• Scripting (SQL, Bash, Python)