IAM Engineer, Sr. (MS Entra ID / AD)

Stefanini, Inc; Pasay; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Stefanini, Inc. is seeking a senior IAM Engineer to provide lead-level design, engineering, and 3rd-level support for Microsoft Entra ID, Active Directory, and Windows Server across the enterprise.

The role includes on-site Pasay duties with cloud integration in Azure and AWS, and collaboration with architecture, operations, and project teams. The ideal candidate will have 7+ years in IT, strong hands-on Entra ID/AD experience, scripting with PowerShell, and a solid understanding of

Qualifications

• 7 years of relevant IT experience
• Demonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)
• Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions
• Previous experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services
• Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
• In-depth and thorough understanding of monitoring best practices preferably with Splunk, Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor
• Experience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks
• Power Shell scripting experience
• Hands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management
• Understand WAN/LAN concepts and the TCP/IP protocol stack

Responsibilities

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure
• Develop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services
• Develop technical partnerships with key architecture, project, operations, and support teams
• Automating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure
• Provide 3 rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.

Skills

Microsoft Entra ID

Active Directory

Windows Server

SSO

Azure

SAML

OAuth2

PowerShell

Monitoring

Multi-Factor Authentication

Education

Bachelor's degree in Information Technology

Microsoft certifications

Job description

Join us to co-create solutions for a better future!

Job Details

END USER TECHNICAL SUPPORT

IAM Engineer, Sr. (MS Entra ID / AD)

Pasay

Posted:8/3/2026

Job Description Job ID#: 64505

Job Category: END USER TECHNICAL SUPPORT

Position Type: Full Time

Remaining Positions: 2

Details: This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure
• Develop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services
• Develop technical partnerships with key architecture, project, operations, and support teams
• Automating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure
• Provide 3 rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.

Job Requirements Details: Qualifications:

• 7 years of relevant IT experience
• Demonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)
• Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions
• Previous experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services
• Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
• In-depth and thorough understanding of monitoring best practices preferably with Splunk, Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor
• Experience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks
• Power Shell scripting experience
• Hands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management
• Understand WAN/LAN concepts and the TCP/IP protocol stack

Preferred:

• Bachelor's degree in Information Technology; Computer Science or related technical field
• Microsoft Windows Server certifications; Azure Certifications or MCSE
• Working knowledge of ticketing systems; creating, updating and closing tickets
• Strong customer service customer service skills (both written and verbal)
• Excellent interpersonal skills, ability to listen and understand what is being described
• Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
• Ability to effectively deliver and execute technical projects across multiple engagements in a customer-facing-capacity

Based on Experience