Azure / Entra ID Engineer

Staffing Spot, Inc.; Minneapolis (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Staffing Spot, Inc. seeks a Senior Azure / Entra ID Security Engineer to lead identity security initiatives in a hybrid environment.

You will design, implement, and manage Entra ID and on-prem AD integration, ensuring secure authentication and access across cloud and on-premises resources. The role requires strong PowerShell scripting, Microsoft Graph proficiency, and experience with sign-in and audit log analysis to remediate identity risks.

Qualifications

• 8+ years of experience in Active Directory, Microsoft Entra ID, and IAM.
• Hands-on experience with Entra Connect Sync and Hybrid Identity.
• Expertise in Conditional Access, MFA, SSO, PIM, and Identity Protection.

Responsibilities

• Design, implement, and manage Microsoft Entra ID and hybrid identity solutions.
• Administer on-premises Active Directory including users, groups, GPOs, DNS, and replication.
• Configure and maintain Microsoft Entra Connect Sync and Cloud Sync.

Skills

Azure

Entra ID

IAM

Hybrid Identity

PowerShell

Microsoft Graph

SAML/OAuth/OpenID

MFA

Conditional Access

PIM

Tools

Entra Connect Sync

Cloud Sync

Job description

Senior Azure / Entra ID Security Engineer

Key Responsibilities

• 8+ years of experience in Active Directory, Microsoft Entra ID, and IAM.
• Strong hands-on experience with Entra Connect Sync and Hybrid Identity.
• Expertise in Conditional Access, MFA, SSO, PIM, and Identity Protection.
• Knowledge of PHS, PTA, Federation, and directory synchronization.
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect.
• Strong PowerShell scripting and Microsoft Graph knowledge.
• Experience troubleshooting AD replication, DNS, Kerberos, and authentication issues.
• Knowledge of enterprise application integration, identity governance, and security best practices.
• Experience with sign-in logs, audit logs, security incident investigation, and root-cause analysis.
• Design, implement, and manage Microsoft Entra ID and hybrid identity solutions.
• Administer on-premises Active Directory, including users, groups, GPOs, DNS, and replication.
• Configure and maintain Microsoft Entra Connect Sync and Cloud Sync.
• Troubleshoot synchronization failures, duplicate attributes, UPN conflicts, and authentication issues.
• Implement Conditional Access, MFA, SSO, Identity Protection, and Privileged Identity Management (PIM).
• Manage hybrid authentication using Password Hash Synchronization (PHS), Pass-through Authentication (PTA), and federation.
• Configure enterprise application integrations using SAML 2.0, OAuth 2.0, and OpenID Connect.
• Manage application registrations, service principals, permissions, certificates, and secrets.
• Automate identity management and reporting using PowerShell and Microsoft Graph.
• Monitor sign-in and audit logs, investigate security incidents, and remediate identity risks.
• Implement least-privilege access, access reviews, and identity governance controls.
• Support hybrid identity migrations, security assessments, production incidents, and root-cause analysis.
• Collaborate with infrastructure, cybersecurity, and application teams to maintain a secure identity environment.

Skills: azure,connect,microsoft azure,conditional access,synchronization,azure active directory,application,enterprise,security,azur entra id,access,microsoft,authentication,active directory