Azure AD Expert (Entra ID)

emagine; Województwo mazowieckie; Hybrid; PLN 193,000 - 275,000; Full time

Job summary

emagine is seeking a Senior Azure / Microsoft Entra ID Consultant to support a cross-tenant identity and cloud governance initiative for an international financial organization. The role involves hands-on architecture, design, and implementation of Entra ID, cross-tenant access, B2B, CA policies, and governance across multiple tenants.

The project includes defining entitlements, access packages, PIM, and RBAC, with a focus on secure access across two Azure environments and coordination with

Qualifications

• Senior-level Microsoft Azure consulting or architecture experience.
• Expert knowledge of Microsoft Entra ID / Azure Active Directory.
• Hands-on experience with Cross-Tenant Access Settings.
• Strong practical knowledge of B2B Collaboration, B2B Direct Connect, External Identities, Cross-Tenant Synchronisation.
• Experience designing Conditional Access policies in complex enterprise environments.
• Strong knowledge of Entra ID Identity Governance.
• Hands-on experience with Entitlement Management, Access Packages and PIM.
• Strong knowledge of Azure RBAC, Management Groups and subscription-level governance.
• Experience designing identity and access solutions across multiple tenants or enterprise domains.
• Understanding of device compliance and endpoint trust integration.
• Strong architectural understanding of Azure Virtual Desktop, session hosts and identity dependencies.
• Excellent English communication skills.

Responsibilities

• Designing and implementing secure access between separate Microsoft Entra ID tenants.
• Configuring and optimising Cross-Tenant Access Settings.
• Implementing B2B Collaboration, B2B Direct Connect and cross-tenant trust settings.
• Designing trust of MFA and compliant-device signals across organisational boundaries.
• Supporting Cross-Tenant Synchronization and external identity lifecycle management.
• Designing identity governance for external users and partner organisations.
• Implementing Entitlement Management, Access Packages, Privileged Identity Management, and appropriate access lifecycle controls.
• Designing Azure governance structures across management groups and subscriptions.
• Configuring Azure RBAC and custom roles for multi-tenant environments.
• Supporting architectural alignment between two large enterprise technology domains.
• Working with endpoint management teams to validate cross-tenant device compliance and trusted-device scenarios.
• Assessing existing Azure Virtual Desktop dependencies and supporting their safe reduction where appropriate.
• Cooperating with existing Azure specialists and enterprise architects during design and implementation. Preparing technical designs, migration plans and operational runbooks.
• Supporting implementation, testing and transition activities.

Skills

Microsoft Azure

Entra ID/Azure Active Directory

Cross-Tenant Access Settings

B2B Collaboration

Azure RBAC

Azure Virtual Desktop (AVD)

Identity Governance

PIM

Job description

Industry: banking

Work model: hybrid or 100% remote

Project length: 12 months + possible extensions

Project language: English / Polish

Assignment type: B2B

Rate: up to 170 PLN/h + VAT

Start: ASAP

We are looking for an experienced Senior Azure / Microsoft Entra ID Consultant to support a complex cross-tenant identity and cloud governance initiative within an international financial organisation. The project aims to simplify access between two separate enterprise Azure / Entra ID environments, enabling users from one corporate domain to securely access applications and resources hosted in another while reducing unnecessary duplicate accounts and selected Azure Virtual Desktop dependencies.

This is a hands-on architecture and implementation role covering Microsoft Entra ID, cross-tenant access, identity governance, Azure RBAC, Conditional Access, endpoint trust and AVD.

Your responsibilities

• Designing and implementing secure access between separate Microsoft Entra ID tenants.
• Configuring and optimising Cross-Tenant Access Settings.
• Implementing B2B Collaboration, B2B Direct Connect and cross-tenant trust settings.
• Designing trust of MFA and compliant-device signals across organisational boundaries.
• Supporting Cross-Tenant Synchronization and external identity lifecycle management.
• Designing identity governance for external users and partner organisations.
• Implementing:
  • Entitlement Management,
  • Access Packages,
  • Privileged Identity Management,
  • appropriate access lifecycle controls.
• Designing Azure governance structures across management groups and subscriptions.
• Configuring Azure RBAC and custom roles for multi-tenant environments.
• Supporting architectural alignment between two large enterprise technology domains.
• Working with endpoint management teams to validate cross-tenant device compliance and trusted-device scenarios.
• Assessing existing Azure Virtual Desktop dependencies and supporting their safe reduction where appropriate.
• Cooperating with existing Azure specialists and enterprise architects during design and implementation.Preparing technical designs, migration plans and operational runbooks.
• Supporting implementation, testing and transition activities.
  

Must-have experience

• Senior-level Microsoft Azure consulting or architecture experience.
• Expert knowledge of Microsoft Entra ID / Azure Active Directory.
• Hands-on experience with Cross-Tenant Access Settings.
• Strong practical knowledge of:
  • B2B Collaboration,
  • B2B Direct Connect,
  • External Identities,
  • Cross-Tenant Synchronisation.
• Experience designing Conditional Access policies in complex enterprise environments.
• Strong knowledge of Entra ID Identity Governance.
• Hands-on experience with Entitlement Management, Access Packages and PIM.
• Strong knowledge of Azure RBAC, Management Groups and subscription-level governance.
• Experience designing identity and access solutions across multiple tenants or enterprise domains.
• Understanding of device compliance and endpoint trust integration.
• Strong architectural understanding of Azure Virtual Desktop, session hosts and identity dependencies.
• Excellent English communication skills.
  

Nice to have

• Experience within banking, financial services or another highly regulated environment.
• Experience coordinating identity or cloud integration between separate enterprise organisations.
• Strong stakeholder management skills.
• Experience preparing architecture documentation, migration plans and production runbooks.
  

#326223