Entra ID Engineer

Prophecy Technologies Corp; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Prophecy Technologies Corp. seeks a highly skilled Entra ID Security Engineer to strengthen authentication and authorization across Azure AD. You will implement secure identities, manage app registrations, and enforce RBAC in enterprise environments.

The role focuses on MFA, SSO, conditional access, and secure integration with OAuth/OpenID Connect and SAML, while collaborating with DevOps and security teams to maintain a robust IAM strategy for scalable cloud solutions.

Qualifications

• Must demonstrate strong expertise in security products, authentication, and authorization.
• Proficiency in Microsoft Azure and related identity services.
• Experience with Windows PowerShell for automation and scripting.

Responsibilities

• Design, implement, and manage Azure Active Directory solutions for secure authentication and authorization.
• Onboard applications, register apps, configure enterprise apps, and manage RBAC.
• Lead MFA and SSO implementations to strengthen security posture.
• Configure and troubleshoot OAuth, OpenID Connect, and SAML authentication flows.
• Manage conditional access policies based on location, device, and compliance.
• Collaborate with DevOps and development teams to support IAM initiatives.
• Stay informed on Azure updates and security best practices.
• Utilize Azure Sentinel for monitoring, alerts, and incident response automation.
• Provide production support and resolve security incidents timely.
• Establish identity governance, including privileged identity management (PIM).
• Drive secure and compliant Azure product configurations across services.

Skills

Identity & access security

Microsoft Azure

Windows PowerShell

MFA & SSO expertise

Job description

We are seeking a highly skilled Entra ID Security Engineer to join our security team. This vital role focuses on ensuring the secure and compliant implementation of Azure Active Directory solutions, with a strong emphasis on Identity, authentication, authorization, Multi-Factor Authentication (MFA), and Single Sign-On (SSO).

Key Responsibilities:

• Design, implement, and manage Azure Active Directory solutions to ensure secure and efficient authentication and authorization processes aligned with industry best practices.
• Drive the onboarding of applications, app registration, enterprise application setup, and role-based access management (RBAC).
• Lead the implementation of Multi-Factor Authentication (MFA) and Single Sign-On (SSO) for enhanced security.
• Configure and troubleshoot authentication protocols, including OAuth, OpenID Connect, and SAML for secure authentication and authorization.
• Configure and manage conditional access policies to control access based on specific conditions, locations, and device compliance.
• Collaborate with cross-functional teams to support and troubleshoot IAM-related issues, ensuring solutions are secure, compliant, and scalable.
• Understand and implement security best practices for Azure products, services, and solutions.
• Utilize Azure Sentinel for monitoring, creating alerts, and developing automation scripts for incident response.
• Provide production support, responding to and resolving security incidents in a timely manner.
• Establish and maintain identity governance frameworks, including privileged identity management (PIM) for elevated access.
• Stay informed of Azure updates, security threats, and industry best practices to enhance our security posture.
• Collaborate with DevOps and development teams, demonstrating a basic understanding of tools and requirements.

Required Skills:

• Expertise in security products, authentication, and authorization.
• Proficiency in Microsoft Azure.
• Experience with Windows Powershell.
• Strong focus on Identity, authentication, authorization, MFA, and SSO.