Azure AD Expert with Entra ID

Optiveum; Warszawa; Hybrid; PLN 141,000 - 234,000; Full time

Job summary

Optiveum is seeking a Senior Azure AD / Microsoft Entra ID Expert to join a global banking client. You will design and implement cross-tenant access, configure B2B, and manage permissions across partner tenants to streamline user access and reduce Azure Virtual Desktop dependencies.

The role is hybrid in Warsaw or Gdańsk/Gdynia area, Poland, offering full-time work with 40 hours per week and a rate up to 170 PLN per hour on a B2B basis.

Qualifications

• Senior-level, hands-on experience with Microsoft Entra ID in enterprise environments.
• Expert knowledge of cross-tenant access settings including B2B, DConnect and MFA/device trust.
• Understanding External Identities and cross-tenant synchronization lifecycle.
• Experience with Entra ID Governance: entitlement management and PIM.
• Proven Azure RBAC expertise in multi-tenant environments.
• Strong knowledge of Conditional Access policies and enforcement.
• Experience with Azure Virtual Desktop deployments and device compliance.
• Fluent English language skills.

Responsibilities

• Design and implement cross-tenant access changes to enable secure cross-tenant collaboration.
• Configure cross-tenant access settings, B2B collaboration and trust for MFA/device claims.
• Set up permissions for client accounts to access apps in the partner tenant.
• Design management groups, RBAC roles and subscription permissions with clear security boundaries.
• Support reduction of Azure Virtual Desktop dependencies and streamline access.
• Collaborate with partner Azure consultant and AD/endpoint teams to align designs.
• Prepare technical designs, migration plans and runbooks.

Skills

Microsoft Entra ID

Cross-tenant access

Entra ID Governance

Azure RBAC

Conditional Access

Azure Virtual Desktop

Fluent English

Job description

Azure AD Expert with Entra ID

About the Offer

We are currently looking for a Senior Azure AD / Microsoft Entra ID Expert to join the team of our global client from the banking industry. You will support the AD team in a cross-tenant initiative: integrating a separate partner tenant as a resource domain, so that client accounts can securely access its applications and resources without separate accounts. The goal is to simplify user management and the user experience and to reduce Azure Virtual Desktop dependencies. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

Key Details:

• Rate: up to 170 PLN/h net (B2B)

• Work Model: hybrid, 3 days per week from the office, full-time (40 h/week)

• Location: Warsaw or Tricity (Gdańsk/Gdynia)

Responsibilities:

• Designing and implementing changes to tenants, subscriptions and Conditional Access policies to enable cross-tenant access

• Configuring cross-tenant access settings, B2B collaboration, B2B direct connect and trust settings (MFA and compliant device claims)

• Setting up permissions for client accounts to access applications and other access-controlled resources in the partner tenant

• Designing management groups, custom RBAC roles and subscription-level permissions while keeping clear security boundaries

• Supporting the safe reduction of Azure Virtual Desktop dependencies

• Working closely with the partner's Azure consultant, the AD team and the endpoint management team

• Preparing technical designs, migration plans and runbooks

Requirements:

• Senior-level, hands-on experience with Microsoft Entra ID (Azure AD) in enterprise environments

• Expert knowledge of cross-tenant access settings: B2B collaboration, B2B direct connect, trust settings for MFA and compliant devices

• In-depth understanding of External Identities, guest accounts and the cross-tenant synchronization lifecycle

• Experience with Entra ID Governance: entitlement management, access packages and Privileged Identity Management (PIM) for external partners

• Proven expertise in Azure RBAC, management groups, custom roles and subscriptions in multi-tenant environments

• Strong experience designing and managing Conditional Access policies

• Experience aligning infrastructure across two separate enterprise environments while preventing permission overlaps

• Understanding of endpoint management and cross-tenant device compliance validation

• Strong experience with Azure Virtual Desktop deployments and session hosts

• Fluent English

Nice to have:

• Stakeholder management skills across separate technical teams

• Technical writing: technical designs, migration plans and runbooks

• Experience in banking or other regulated industries