Entra ID Consultant

Society of Defense Financial Management; Chicago (IL); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Themesoft Inc in Chicago is seeking an Entra ID Consultant to lead design and implementation of workforce identity and access management. This role focuses on modern IAM solutions and secure authentication workflows in hybrid environments.

You will apply Zero Trust, least privilege, and defense-in-depth principles while guiding teams on Entra ID, OAuth/OIDC, SAML, and MFA across Azure and AWS. 10+ years of cybersecurity experience preferred.

Qualifications

• Demonstrated expertise in identity architecture with Entra ID/Azure AD.
• Experience with OAuth 2.0, OIDC, SAML, JWT, Kerberos, LDAP.
• Strong knowledge of RBAC, PIM, and least-privilege access.
• Experience with Microsoft Sentinel, KQL, and audit logs.
• Secure microservices, web and mobile apps with API security.
• Knowledge of Zero Trust, threat modeling, OWASP.
• Technical leadership to guide security architecture discussions.

Responsibilities

• Lead design and implementation of workforce identity and access management.
• Develop identity architectures aligned with Zero Trust and least privilege.
• Provide architectural guidance for Entra ID and IAM solutions.
• Evaluate AI-driven identity solutions and secure authentication workflows.
• Review security proposals and advise IT management and partners.
• Apply OAuth 2.0, OIDC, SAML, MFA, Kerberos, LDAP in solutions.
• Ensure security of Java microservices, React frontends, and mobile apps.
• Support container security with Docker and Kubernetes.
• Drive security automation and governance initiatives across hybrid/cloud.

Skills

Microsoft Entra ID / Azure AD

IAM & Workforce Security

Authentication Protocols

Cloud Security

Security Monitoring

Application & API Security

Security Architecture

Technical Leadership

Job description

Job Description: Entra ID Consultant

Location: Chicago, IL - Onsite

Experience: 10+ Years

Domain: Cybersecurity – Identity & Access Management (IAM) / Information Security

Job Summary

Key Responsibilities

• Lead the design and implementation of workforce identity, authentication, authorization, and access management solutions.
• Develop identity architectures and access patterns aligned with Zero Trust, least privilege, defense-in-depth, and modern security principles.
• Provide technical leadership and architectural guidance for Microsoft Entra ID and related IAM security solutions.
• Evaluate and implement AI-driven identity solutions, including agentic identity, AI adoption patterns, and secure authentication workflows.
• Review security solutions proposed by stakeholders and provide expert consultation to IT management and partner teams.
• Design and implement authentication and authorization mechanisms using OAuth 2.0, OpenID Connect (OIDC), SAML, SSO, MFA, Kerberos, LDAP, and identity federation.
• Secure Java-based microservices, React frontends, and Android/iOS applications across Azure and hybrid environments.
• Implement application registration, application integration, JWT validation, session management, certificate-based authentication, TLS/SSL, code signing, and API security.
• Support identity governance, entitlement management, privileged identity management (PIM), role-based access control (RBAC), just-in-time (JIT) access, passwordless authentication, and secrets management.
• Leverage Microsoft Sentinel, Kusto Query Language (KQL), and audit logs to investigate and troubleshoot complex identity and security issues.
• Provide expertise in Azure and AWS security, Enterprise Privilege Management (EPM), Cloud Infrastructure Entitlement Management (CIEM), and entitlement risk remediation.
• Apply threat modeling methodologies, OWASP standards, application security practices, and secure cloud architecture principles.
• Collaborate with infrastructure and application teams on security solutions involving firewalls, VPNs, DLP, WAFs, application gateways, Azure Application Proxy, DNS, CDN, and network security groups.
• Support container security and orchestration platforms, including Docker and Kubernetes.
• Drive security automation, operational improvements, and identity governance initiatives across hybrid and cloud environments.

Required Skills

• Microsoft Entra ID / Azure AD: Deep expertise in identity architecture, authentication, authorization, Conditional Access, MFA, SSO, and identity federation.
• IAM & Workforce Security: Strong knowledge of identity lifecycle management, identity governance, access policies, RBAC, PIM, and least-privilege access.
• Authentication Protocols: Hands-on experience with OAuth 2.0, OIDC, SAML, JWT, Kerberos, LDAP, and modern authentication flows.
• Cloud Security: Strong understanding of Azure security, AWS security, cloud-native architectures, and privileged access management.
• Security Monitoring: Experience with Microsoft Sentinel, KQL, audit logs, and identity-related incident investigation.
• Application & API Security: Experience securing microservices, web applications, mobile applications, APIs, certificates, and session handling.
• Security Architecture: Strong understanding of Zero Trust, threat modeling, OWASP, defense-in-depth, and security best practices.
• Technical Leadership: Proven ability to lead technical teams, define architecture, review security solutions, and advise stakeholders.

Preferred Skills

• Experience with Okta, PingFederate, SailPoint, and other identity governance or entitlement management solutions.
• Knowledge of Entra ID agentic identity, AI security concepts, and AI-driven identity and access management.
• Experience with CIEM solutions and remediation of excessive permissions, toxic entitlement combinations, and high-risk access.
• Familiarity with Enterprise Privilege Management (EPM), passwordless authentication, YubiKey, and biometric authentication.
• Knowledge of Microsoft Defender for Cloud, Microsoft Cloud App Security (MCAS), App Proxy, RADIUS, WAF, and network security technologies.
• Experience with Docker security, Kubernetes, cloud cryptography, and cloud-native security services.
• Understanding of container orchestration, browser security, cookies, and browser storage mechanisms.

Work Authorization

Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.