L3 Support Engineer - Azure Active Directory

HSBC; Ciudad de México; Presencial; MXN 200,000 - 400,000; Jornada completa

Descripción de la vacante

A global banking and financial institution in Mexico is looking for an experienced L3 Support Engineer specializing in Microsoft Entra identity solutions. The role involves troubleshooting hybrid identity issues, providing expert IAM support, and managing identity risk investigations. Candidates should have 7-10 years of IAM experience and hold relevant Microsoft certifications. The position promotes a culture of well-being and inclusive professional growth, with competitive leave benefits.

Servicios

Competitive leave days

Professional development opportunities

Inclusive workplace culture

Formación

• 7–10 years’ experience in IAM engineering or advanced enterprise support.
• Experience with large-scale application onboarding and federation to Entra ID.
• Familiarity with Zero Trust security architecture.

Responsabilidades

• Act as SME and final escalation point for incidents related to Microsoft Entra ID.
• Troubleshoot and remediate hybrid identity issues.
• Manage identity risk investigations and suspicious sign-in events.
• Provide expert IAM support across Microsoft Entra, AWS IAM, and GCP IAM.
• Create advanced runbooks, troubleshooting playbooks, and automation scripts.

Conocimientos

Expert-level knowledge of Microsoft Entra ID

Strong expertise in hybrid identity environments

Hands-on experience with Microsoft Defender for Identity

Advanced PowerShell scripting

Deep understanding of authentication protocols

Educación

Microsoft certifications: SC-300, SC-100, AZ-500

Herramientas

Microsoft Entra ID

AD FS

AWS IAM

GCP IAM

Descripción del empleo

If you’re looking for a career where you can make a real impression, join Global Service Center (GSC) HSBC and discover how valued you’ll be. HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

L3 Support Engineer - Azure AD

We are currently seeking an experienced professional to join our team in the role L3 Support Engineer - Azure AD.

Role Purpose

We are seeking a highly skilled Level 3 Support Engineer/Senior Engineer with advanced expertise in Microsoft Entra (Identity & Access Management). This role serves as the highest technical escalation point, responsible for resolving complex identity issues, conducting root cause analysis, and ensuring secure and resilient identity services across hybrid and multi-cloud environments.

Main Activities

• Act as SME and final escalation point for incidents related to Microsoft Entra ID, Identity Protection, Conditional Access, MFA, Privileged Identity Management (PIM), and Cloud Infrastructure Entitlement Management (CIEM).
• Troubleshoot and remediate hybrid identity issues involving on-premises Active Directory, Azure AD Connect, and AD FS.
• Manage identity risk investigations, suspicious sign‑in events, and Conditional Access enforcement issues.
• Support integration of Microsoft Defender for Identity with Entra ID and on‑prem AD for advanced threat detection and response.
• Provide expert IAM support across Microsoft Entra, AWS IAM, and GCP IAM.
• Lead advanced RCAs for high‑severity identity incidents and drive permanent fixes.
• Collaborate with Microsoft engineering and product teams on complex escalations.
• Create advanced runbooks, troubleshooting playbooks, and automation scripts.
• Partner with application, infrastructure, and security teams to secure IAM integrations.
• Mentor Level 1 and Level 2 engineers to build internal IAM capability.
• Participate in on‑call rotations and provide leadership during major incidents.

Preferred Qualifications

• Microsoft certifications: SC‑300, SC‑100, AZ‑500, or equivalent.
• 7–10 years’ experience in IAM engineering or advanced enterprise support.
• Experience with large‑scale application onboarding and federation to Entra ID.
• Familiarity with Zero Trust security architecture.

Required Skills & Experience

• Expert‑level knowledge of Microsoft Entra ID (Azure AD), including Identity Protection, Conditional Access, PIM, CIEM, and Governance.
• Strong expertise in hybrid identity environments: AD DS, AD Connect, AD FS.
• Hands‑on experience with Microsoft Defender for Identity.
• Deep understanding of authentication and authorization protocols: SAML, OAuth, OpenID Connect, Kerberos, LDAP.
• Experience managing IAM integrations with AWS IAM and GCP IAM.
• Advanced PowerShell scripting and automation capabilities.
• Proven track record in high‑severity incident management and RCA delivery.

Due to the urgent hiring need, candidates with immediate right to work locally and no relocation need will be prioritised.

At HSBC we offer our colleagues a greater number of leave days so that they can fully enjoy their wedding, take care of the new member of the family, or grieve the loss of a family member. Our paid leave package is at the forefront in Mexico, now you have one more reason to be HSBC and proudly live a culture of well‑being, balance, and care.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.