IAM Engineer, Sr. (MS Entra ID / AD)

Stefanini North America and APAC; Philippines; On-site; PHP 5,511,000 - 7,961,000; Full time

Job summary

Stefanini North America and APAC is seeking a lead-level architect to design, implement, and support Microsoft Entra, Active Directory, and Windows Server across enterprise environments. The role includes on-prem and cloud deployments (AWS/Azure) and MFA/SSO implementations.

You will develop engineering standards, partner with architecture and operations teams, and drive automation for multi-forest EntraID/AD environments, while delivering senior-level operational support.

Qualifications

• 7 years of relevant IT experience.
• Demonstrated experience in a high-tech customer-facing role (Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting).
• Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale enterprise solutions.
• Previous experience designing infrastructure and integrating Entra ID and AD services.
• Five years of experience supporting Active Directory or Microsoft Entra ID.
• In-depth understanding of monitoring practices with Splunk MECM or Quest Change Auditor.
• Experience with infrastructure concepts, virtualization (VMware, Hyper-V), networking, and TLS/SSL concepts.
• PowerShell scripting experience.
• Hands-on MFA, SSO, and SSL certificate implementation and management.
• Understand WAN/LAN concepts and TCP/IP.

Responsibilities

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory across the enterprise, including cloud deployments in AWS and Azure.
• Develop and enhance Entra ID and Active Directory engineering standards for a multi-site organization.
• Develop technical partnerships with architecture, project, operations, and support teams.
• Automate Microsoft authentication solutions in multi-forest environments and configure IaaS cloud solutions (AWS/Azure).
• Provide 3rd level support for enterprise-wide Entra ID and AD, including AAD Connect, SSO, and Graph API.

Skills

PowerShell scripting

Senior level support

Customer facing

Education

Bachelor's degree in IT / CS

Tools

Splunk

MECM

Quest Change Auditor

AAD Connect

Job description

Details:

\u003cp\u003eJob Description This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.\u003c/p\u003e

Responsibilities:

\u003culu3>\u003cli\u003eProvide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure\u003c/li\u003e\u003cli\u003eDevelop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services\u003c/li\u003e\u003cli\u003eDevelop technical partnerships with key architecture, project, operations, and support teams\u003c/li\u003e\u003cli\u003eAutomating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure\u003c/li\u003e\u003cli\u003eProvide 3rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.\u003c/li\u003e\u003c/ulu3>

Job Requirements:

\u003culu3>\u003cli\u003eDetails: Qualifications:\u003c/li\u003e\u003cli\u003e7 years of relevant IT experience\u003c/li\u003e\u003cli\u003eDemonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)\u003c/li\u003e\u003cli\u003eHands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions\u003c/li\u003e\u003cli\u003ePrevious experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services\u003c/li\u003e\u003cli\u003eFive years of demonstrated experience supporting Active Directory or Microsoft Entra ID\u003c/li\u003e\u003cli\u003eIn-depth and thorough understanding of monitoring best practices preferably with Splunk, Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor\u003c/li\u003e\u003cli\u003eExperience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks\u003c/li\u003e\u003cli\u003ePower Shell scripting experience\u003c/li\u003e\u003cli\u003eHands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management\u003c/li\u003e\u003cli\u003eUnderstand WAN/LAN concepts and the TCP/IP protocol stack\u003c/li\u003e\u003c/ul3>

Preferred:

\u003culu3>\u003cli\u003eBachelor's degree in Information Technology; Computer Science or related technical field\u003c/li\u003e\u003cli\u003eMicrosoft Windows Server certifications; Azure Certifications or MCSE\u003c/li\u003e\u003cli\u003eWorking knowledge of ticketing systems; creating, updating and closing tickets\u003c/li\u003e\u003cli\u003eStrong customer service customer service skills (both written and verbal)\u003c/li\u003e\u003cli\u003eExcellent interpersonal skills, ability to listen and understand what is being described\u003c/li\u003e\u003cli\u003eExperience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform\u003c/li\u003e\u003cli\u003eAbility to effectively deliver and execute technical projects across multiple engagements in a customer-facing-capacity\u003c/li\u003e\u003c/ul3> ,
\u003c/p\u003e