Senior Identity and Access Management Engineer (Microsoft Entra)

NTT DATA Global Delivery Services Ltd; Bengaluru; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

NTT DATA is seeking an experienced Senior Microsoft Entra IAM Engineer to design and implement enterprise identity solutions across cloud, on‑premises, and hybrid environments. This role emphasizes hands‑on engineering, automation, and governance beyond routine administration.

The candidate will drive identity modernization, lead complex integrations, and collaborate with Cybersecurity, Cloud, and Architecture teams to deliver Zero Trust aligned solutions.

Qualifications

• 8+ years of IAM, Identity Engineering, Cybersecurity, or related experience.
• 5+ years hands-on experience with Microsoft Entra ID / Azure AD.
• 3+ years of complex SSO and application integrations.
• 3+ years experience with Conditional Access, MFA, PIM, Identity Governance, and hybrid identity.

Responsibilities

• Design, implement, configure, and support Microsoft Entra ID solutions across complex enterprise environments.
• Develop secure and scalable identity architectures for cloud, SaaS, on-premises, and hybrid environments.
• Lead technical implementation of IAM modernization and migration initiatives.
• Develop and maintain Conditional Access policies based on risk, location, and authentication strength.
• Integrate enterprise, cloud, and SaaS apps with Entra ID and manage App Registrations.
• Automate IAM provisioning and deprovisioning using PowerShell and Microsoft Graph API.

Skills

Entra ID / Azure AD

Conditional Access

MFA

Passwordless

PowerShell

Microsoft Graph API

Tools

REST APIs

IaC

Job description

Position Summary

We are seeking an experienced Senior Microsoft Entra / Identity & Access Management (IAM) Engineer with strong hands‑on expertise in designing, implementing, securing, automating, and supporting enterprise identity solutions using Microsoft Entra ID (formerly Azure Active Directory) and related Microsoft identity technologies. The ideal candidate will have deep technical experience across identity architecture, authentication, authorization, SSO, MFA, Conditional Access, Privileged Identity Management (PIM), Identity Governance, hybrid identity, application integration, and identity lifecycle management. This is a senior hands‑on engineering role, not primarily an IAM administration position. The successful candidate should demonstrate the ability to independently design IAM solutions, lead complex application integrations, automate identity processes, troubleshoot advanced authentication and provisioning issues, and provide technical leadership. The engineer will collaborate with Cybersecurity, Cloud, Infrastructure, Application, Architecture, Compliance, and Operations teams to deliver scalable identity solutions aligned with Zero Trust and least‑privilege security principles.

Key Responsibilities

• Microsoft Entra ID Engineering: Design, implement, configure, and support Microsoft Entra ID solutions across complex enterprise environments.
• Develop secure and scalable identity architectures for cloud, SaaS, on‑premises, and hybrid environments.
• Translate security and business requirements into detailed IAM technical designs.
• Establish reusable identity engineering patterns, standards, and implementation approaches.
• Lead technical implementation of IAM modernization and migration initiatives.
• Authentication & Access Management Design and implement enterprise authentication and authorization solutions involving: Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), Passwordless Authentication, FIDO2, Windows Hello for Business, Role-Based Access Control (RBAC), Federation.
• Develop and maintain Conditional Access policies based on user, device, application, location, authentication strength, and identity risk.
• Implement access models based on Zero Trust and least‑privilege principles.
• Support Entra ID Protection, identity‑risk detection, investigation, and remediation.
• Application Integration & Federation: Integrate enterprise, cloud, and SaaS applications with Microsoft Entra ID.
• Design and troubleshoot identity integrations using: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM.
• Configure and support Enterprise Applications and App Registrations.
• Lead migrations from legacy authentication and federation platforms to Microsoft Entra ID.
• Participate in application architecture and security reviews to define appropriate identity‑integration patterns.
• Identity Governance & Lifecycle Management: Design, implement, and manage Microsoft Entra ID Governance capabilities.
• Configure and support Access Reviews, Entitlement Management, Access Packages, Lifecycle Workflows, Identity Governance policies.
• Engineer identity lifecycle processes covering Joiner, Mover, and Leaver (JML) scenarios.
• Develop automated provisioning and deprovisioning processes.
• Support access certification and periodic entitlement reviews.
• Privileged Identity Management: Design, implement, and administer Microsoft Entra Privileged Identity Management (PIM).
• Implement Just‑in‑Time (JIT) privileged access and least‑privilege controls.
• Establish appropriate approval, activation, expiration, and access‑review processes for privileged roles.
• Reduce standing administrative privileges and improve governance of elevated access.
• Hybrid Identity: Design and support hybrid identity solutions integrating on‑premises Active Directory with Microsoft Entra ID.
• Implement and support Entra Connect and Cloud Sync.
• Troubleshoot directory synchronization, authentication, provisioning, and federation issues.
• Support migration and modernization from traditional on‑premises identity environments to cloud‑based identity services.
• IAM Automation: Automate IAM administration, provisioning, governance, and operational activities using PowerShell, Microsoft Graph API, REST APIs, and Infrastructure-as-Code approaches.
• Develop reusable automation scripts and engineering components.
• Identify manual identity processes that can be automated to improve efficiency, consistency, and security.
• Support integration of IAM engineering with DevOps and CI/CD practices where appropriate.
• Advanced Troubleshooting & Security Monitoring: Troubleshoot complex issues involving Authentication, Authorization, SSO, Federation, Provisioning, Synchronization, Conditional Access, and Application access.
• Analyze sign‑in logs, audit logs, provisioning logs, and security events to diagnose identity‑related issues.
• Conduct root‑cause analysis for complex or recurring IAM incidents.
• Partner with Security Operations/SOC teams to investigate identity‑related security events.
• Support production incidents and drive issues through resolution.
• Zero Trust & Identity Security: Partner with cybersecurity teams to implement Zero Trust identity architecture.
• Implement controls supporting continuous verification, strong authentication, least privilege, and risk‑based access.
• Identify identity‑related security and operational risks and recommend appropriate controls.
• Participate in cybersecurity architecture, application security, and IAM risk reviews.
• Technical Leadership: Own IAM solutions from requirements and technical design through implementation and production support.
• Develop architecture diagrams, technical designs, implementation plans, operational procedures, and engineering documentation.
• Lead complex IAM implementations, migrations, and troubleshooting activities.
• Establish engineering standards and reusable identity patterns.
• Conduct technical design and peer reviews.
• Mentor junior and mid‑level IAM engineers.
• Provide technical recommendations to security, architecture, and technology leadership.

Required Technical Skills

• Microsoft Entra ID / Azure Active Directory
• Entra Conditional Access
• Multi‑Factor Authentication (MFA)
• Passwordless Authentication
• FIDO2 / Windows Hello for Business
• Entra Privileged Identity Management (PIM)
• Entra ID Governance
• Entra ID Protection
• Enterprise Applications & App Registrations
• SSO & Federation (SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM)
• Provisioning
• Active Directory
• Hybrid Identity
• Entra Connect / Cloud Sync
• Microsoft Graph API
• PowerShell Automation
• RBAC & Least‑Privilege Access
• Identity Lifecycle Management / JML
• Authentication & Provisioning
• Troubleshooting Identity Security Logging & Monitoring

Required Experience

• 8+ years of IAM, Identity Engineering, Cybersecurity, or related experience.
• 5+ years of significant hands‑on experience with Microsoft Entra ID / Azure Active Directory.
• 5+ years of proven experience designing and implementing enterprise IAM solutions rather than primarily performing operational administration.
• 3+ years of strong experience with complex SSO and application integrations.
• 3+ years of hands‑on experience with Conditional Access, MFA, PIM, Identity Governance, and hybrid identity.
• 3+ years of experience developing IAM automation using PowerShell and Microsoft Graph API.
• 1 to 3 years of strong understanding of identity security and Zero Trust architecture.
• Demonstrated ability to independently troubleshoot complex identity and access issues.
• Strong technical documentation, communication, analytical, and problem‑solving skills.

Preferred Qualifications

• Experience supporting large‑scale enterprise or multi‑tenant Entra environments.
• Experience migrating applications from legacy authentication/federation technologies to Entra ID.
• Experience integrating Entra with Microsoft 365, Microsoft Azure, Endpoint/device‑management platforms, SIEM/SOC solutions, and third‑party SaaS applications.
• Familiarity with other IAM/PAM platforms such as SailPoint, Saviynt, Okta, CyberArk, or Ping Identity.
• Experience with Infrastructure as Code and/or CI/CD approaches for IAM deployments.
• Familiarity with security and regulatory frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Preferred Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Azure/Security certifications, CISSP, and other relevant IAM or cybersecurity certifications.

Senior‑Level Expectations

• Operate with limited technical supervision and demonstrate capabilities beyond routine Microsoft Entra administration.
• Hands‑on Entra engineering, IAM solution architecture and technical design.
• Complex SSO/application integrations.
• Advanced authentication and provisioning troubleshooting.
• IAM automation using PowerShell/Graph API.
• Conditional Access and security policy engineering.
• Zero Trust and least‑privilege implementation.
• Technical leadership and mentoring.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise‑scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centres as well as established and start‑up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D. Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs.

While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in‑office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees.

NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us. NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Experience Level Senior Level