Azure / Entra ID Engineer

Staffing Spot, Inc.; Charlotte (NC); On-site; USD 140,000 - 175,000; Full time

Job summary

Staffing Spot, Inc. seeks a Senior Azure / Entra ID Security Engineer to architect and secure hybrid identity ecosystems. You will leverage Entra ID, CA, MFA, SSO, and PIM to harden access across cloud and on-prem environments.

Responsibilities include implementing Connect Sync, monitoring logs, and automating identity tasks with PowerShell and Graph. Collaboration with infra and security teams is essential.

Qualifications

• Extensive experience with Microsoft Entra ID and hybrid identity architectures.
• Proficient in configuring CA, MFA, SSO, and identity protection.
• Strong scripting with PowerShell and Microsoft Graph.
• Experience troubleshooting AD, DNS, Kerberos, and auth issues.

Responsibilities

• Design, implement, and manage Microsoft Entra ID and hybrid identity solutions.
• Administer on-premises AD including users, groups, GPOs, DNS, and replication.
• Configure and maintain Entra Connect Sync and Cloud Sync.
• Troubleshoot synchronization failures, UPN conflicts, and auth issues.
• Implement least-privilege access, access reviews, and identity governance.
• Manage application registrations, service principals, certificates, and secrets.
• Automate identity management and reporting with PowerShell and Microsoft Graph.
• Monitor sign-in/audit logs and perform root-cause analysis of security incidents.
• Collaborate with infrastructure, cybersecurity, and application teams.

Skills

Azure

Entra ID

Conditional Access

MFA

SSO

PIM

PowerShell

Microsoft Graph

Hybrid Identity

PHS

PTA

SAML 2.0

OAuth 2.0

OpenID Connect

Kerberos

Job description

Senior Azure / Entra ID Security Engineer

Key Responsibilities

• 8+ years of experience in Active Directory, Microsoft Entra ID, and IAM.
• Strong hands-on experience with Entra Connect Sync and Hybrid Identity.
• Expertise in Conditional Access, MFA, SSO, PIM, and Identity Protection.
• Knowledge of PHS, PTA, Federation, and directory synchronization.
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect.
• Strong PowerShell scripting and Microsoft Graph knowledge.
• Experience troubleshooting AD replication, DNS, Kerberos, and authentication issues.
• Knowledge of enterprise application integration, identity governance, and security best practices.
• Experience with sign-in logs, audit logs, security incident investigation, and root-cause analysis.
• Design, implement, and manage Microsoft Entra ID and hybrid identity solutions.
• Administer on-premises Active Directory, including users, groups, GPOs, DNS, and replication.
• Configure and maintain Microsoft Entra Connect Sync and Cloud Sync.
• Troubleshoot synchronization failures, duplicate attributes, UPN conflicts, and authentication issues.
• Implement Conditional Access, MFA, SSO, Identity Protection, and Privileged Identity Management (PIM).
• Manage hybrid authentication using Password Hash Synchronization (PHS), Pass-through Authentication (PTA), and federation.
• Configure enterprise application integrations using SAML 2.0, OAuth 2.0, and OpenID Connect.
• Manage application registrations, service principals, permissions, certificates, and secrets.
• Automate identity management and reporting using PowerShell and Microsoft Graph.
• Monitor sign-in and audit logs, investigate security incidents, and remediate identity risks.
• Implement least-privilege access, access reviews, and identity governance controls.
• Support hybrid identity migrations, security assessments, production incidents, and root-cause analysis.
• Collaborate with infrastructure, cybersecurity, and application teams to maintain a secure identity environment.

Skills: azure,connect,microsoft azure,conditional access,synchronization,azure active directory,application,enterprise,security,azur entra id,access,microsoft,authentication,active directory