Azure Entra ID Security Engineer | MFA, SSO & IAM

Prophecy Technologies Corp; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Prophecy Technologies Corp. seeks a highly skilled Entra ID Security Engineer to strengthen authentication and authorization across Azure AD. You will implement secure identities, manage app registrations, and enforce RBAC in enterprise environments.

The role focuses on MFA, SSO, conditional access, and secure integration with OAuth/OpenID Connect and SAML, while collaborating with DevOps and security teams to maintain a robust IAM strategy for scalable cloud solutions.

Qualifications

• Must demonstrate strong expertise in security products, authentication, and authorization.
• Proficiency in Microsoft Azure and related identity services.
• Experience with Windows PowerShell for automation and scripting.

Responsibilities

• Design, implement, and manage Azure Active Directory solutions for secure authentication and authorization.
• Onboard applications, register apps, configure enterprise apps, and manage RBAC.
• Lead MFA and SSO implementations to strengthen security posture.
• Configure and troubleshoot OAuth, OpenID Connect, and SAML authentication flows.
• Manage conditional access policies based on location, device, and compliance.
• Collaborate with DevOps and development teams to support IAM initiatives.
• Stay informed on Azure updates and security best practices.
• Utilize Azure Sentinel for monitoring, alerts, and incident response automation.
• Provide production support and resolve security incidents timely.
• Establish identity governance, including privileged identity management (PIM).
• Drive secure and compliant Azure product configurations across services.

Skills

Identity & access security

Microsoft Azure

Windows PowerShell

MFA & SSO expertise

Job description

Prophecy Technologies Corp. seeks a highly skilled Entra ID Security Engineer to strengthen authentication and authorization across Azure AD. You will implement secure identities, manage app registrations, and enforce RBAC in enterprise environments.

The role focuses on MFA, SSO, conditional access, and secure integration with OAuth/OpenID Connect and SAML, while collaborating with DevOps and security teams to maintain a robust IAM strategy for scalable cloud solutions.