Entra ID IAM Lead - SSO & Secure Auth Architect

Cloud88Inc; Chicago (IL); On-site; USD 140,000 - 170,000; Full time

Job summary

Cloud88Inc is seeking an experienced Microsoft Entra ID Lead to drive enterprise IAM initiatives in Chicago. You will design secure authentication solutions, onboard applications, and troubleshoot complex issues, collaborating with security, infrastructure, and engineering teams.

The role requires 8+ years in IAM, hands-on Entra ID expertise, and deep knowledge of OAuth/OIDC/SAML/SCIM, CA, MFA, and SSO. You will guide enterprise app onboarding and API security efforts.

Qualifications

• 8+ years IAM / Identity Security experience.
• Hands-on with Microsoft Entra ID / Azure AD.
• Knowledge of IAM concepts and architecture.
• Experience with OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0.
• Experience with Conditional Access, MFA, Identity Protection, PIM, Access Reviews, Lifecycle Workflows.
• Experience with App Registrations and Enterprise Applications.
• Experience onboarding enterprise apps and implementing SSO/federation.
• Strong understanding of OAuth flows, tokens, claims, scopes, and certs.
• Experience with B2B, External Identities, Cross-Tenant Access.
• Understanding auth, authorization, federation, token-based auth, API security.
• Troubleshooting SSO, authentication, federation, CA, token issues.
• Ability to lead technical discussions with engineering teams.
• Excellent communication, documentation, collaboration, and problem solving.

Responsibilities

• Lead design, implementation, administration, and support of Entra ID / Azure AD solutions.
• Manage users, groups, enterprise apps, app registrations, service principals, and identities.
• Design and implement CA, MFA, Identity Protection, PIM, Access Reviews, Lifecycle Workflows.
• Lead enterprise app onboarding and secure SSO integrations.
• Configure and troubleshoot OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0 integrations.
• Support B2B collaboration, External Identities, guest access, cross-tenant access.
• Define authentication/authorization requirements with app owners and engineering teams.
• Configure OAuth flows and app registrations, certificates, secrets, and consent.
• Troubleshoot tokens, claims, and SSO/authentication failures.
• Analyze sign-in logs, audit logs, and CA results to identify root causes.
• Provide IAM architecture guidance and best practices.
• Collaborate with security, infra, cloud, and business teams on scalable identity solutions.
• Lead RCA for production IAM incidents.

Skills

Entra ID / Azure AD

IAM / Identity Security

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

Conditional Access

MFA

PIM / Access Reviews

SSO / Federation

App Registrations / Enterprise Apps

OAuth flows / tokens

B2B / External Identities

API security

Technical leadership

Tools

Microsoft Graph API

PowerShell

Job description

Cloud88Inc is seeking an experienced Microsoft Entra ID Lead to drive enterprise IAM initiatives in Chicago. You will design secure authentication solutions, onboard applications, and troubleshoot complex issues, collaborating with security, infrastructure, and engineering teams.

The role requires 8+ years in IAM, hands-on Entra ID expertise, and deep knowledge of OAuth/OIDC/SAML/SCIM, CA, MFA, and SSO. You will guide enterprise app onboarding and API security efforts.