Entra ID Migration & IAM Engineer Lead

Sandisk; Irvine (CA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Sandisk is seeking a Staff Security Operations Engineer focused on Entra ID device migration and IAM engineering support in Irvine, CA. You will drive device enrollment migrations, manage Conditional Access, and ensure secure hybrid identity with Entra ID Connect.

The role also covers MFA administration, MDM (Intune), and AD integration. You will act as a technical escalation point for Entra ID incidents, automate tasks with PowerShell and Graph, and maintain IAM documentation and runbooks.

Qualifications

• 6+ years of IT or Information Security experience with IAM focus.
• 3+ years hands-on with Microsoft Entra ID (Azure AD) including device migration.
• Experience with Duo MFA, Windows Hello for Business, Microsoft Intune, and Active Directory.

Responsibilities

• Drive and lead device migrations into Entra ID, including Entra ID join and hybrid join.
• Configure and manage Conditional Access policies, Identity Protection, SSO, app registrations, and enterprise applications.
• Support hybrid identity using Microsoft Entra Connect for synchronization between on-prem AD and Entra ID.
• Automate Entra ID administration, reporting, and provisioning tasks using PowerShell and Microsoft Graph.
• Provide IAM process optimization and incident response for Entra ID and related technologies.

Skills

Entra ID

Azure AD

MFA management

MDM (Intune)

Active Directory

PowerShell

Microsoft Graph

Duo MFA

Conditional Access

Intune

Education

BA/BS in IT, CS, InfoSec or related field

Tools

Microsoft Entra ID

Azure AD Connect

Duo MFA

Windows Hello for Business

Intune

Job description

Sandisk is seeking a Staff Security Operations Engineer focused on Entra ID device migration and IAM engineering support in Irvine, CA. You will drive device enrollment migrations, manage Conditional Access, and ensure secure hybrid identity with Entra ID Connect.

The role also covers MFA administration, MDM (Intune), and AD integration. You will act as a technical escalation point for Entra ID incidents, automate tasks with PowerShell and Graph, and maintain IAM documentation and runbooks.