Entra ID Security Engineer / Azure Identity Security Engineer

Realtek Consulting LLC; Chicago (IL); On-site; USD 120,000 - 190,000; Full time

Job summary

Realtek Consulting LLC in Chicago is seeking a highly skilled Entra ID Security Engineer with 8–10 years of IT security experience to design, implement, and manage secure identity solutions using Entra ID/AAD. The role emphasizes MFA, SSO, Conditional Access, RBAC, and identity governance across enterprise environments.

Candidates will collaborate with security, DevOps, development, and infrastructure teams, provide production support, and continuously improve IAM processes and automation.

Qualifications

• 8–10 years of IT/security experience.
• Strong hands-on experience with Microsoft Entra ID / Azure AD.
• Experience implementing MFA and SSO.
• Strong knowledge of OAuth 2.0, OpenID Connect, and SAML.
• Experience onboarding enterprise applications with Entra ID.
• Experience with Microsoft Sentinel / Azure Sentinel.
• Excellent communication and stakeholder management skills.
• Ability to work with security, development, DevOps and infrastructure teams.

Responsibilities

• Design, implement, configure, and manage Microsoft Entra ID / Azure AD solutions.
• Lead MFA and SSO implementation and management.
• Configure and troubleshoot OAuth 2.0, OpenID Connect, and SAML.
• Design, configure, and manage Conditional Access policies.
• Provide production support for identity and security solutions.
• Collaborate with security, DevOps, development, and infrastructure teams.
• Monitor and improve IAM processes, controls, automation, and security posture.

Skills

8–10 years IT/security experience

Strong Entra ID / Azure AD experience

Enterprise IAM knowledge

MFA and SSO experience

Conditional Access

RBAC and PIM

OAuth 2.0 / OpenID Connect / SAML

Onboarding enterprise applications

Microsoft Sentinel / Azure Sentinel

PowerShell scripting

Production IAM support

Troubleshooting / analytical skills

Cross-functional collaboration

Tools

Windows PowerShell

Automation tooling

Job description

We are seeking a highly skilled Entra ID Security Engineer with 8–10 years of experience and strong expertise in Microsoft Entra ID (formerly Azure Active Directory), Identity and Access Management (IAM), authentication, authorization, and Azure security solutions.

The ideal candidate will be responsible for designing, implementing, and managing secure identity solutions across the enterprise. This role will focus heavily on application onboarding, MFA, SSO, Conditional Access, RBAC, identity governance, PIM, authentication protocols, and security monitoring.

The candidate should have strong troubleshooting and production support capabilities and be comfortable collaborating with security, DevOps, development, infrastructure, and application teams.

Key Responsibilities

Microsoft Entra ID / Azure AD

• Design, implement, configure, and manage Microsoft Entra ID / Azure Active Directory solutions.
• Ensure secure and efficient authentication and authorization processes aligned with enterprise security best practices.
• Drive application onboarding activities, including:
• Application Registration
• Enterprise Application Configuration
• Application Permissions
• Role-Based Access Control (RBAC)

Manage identities, roles, permissions, and access policies across Azure environments.

Authentication & Authorization

• Lead the implementation and management of Multi-Factor Authentication (MFA).
• Implement and manage enterprise Single Sign-On (SSO) solutions.
• Configure and troubleshoot authentication and authorization protocols, including:
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML

Troubleshoot authentication failures and authorization issues. Ensure authentication solutions are secure, scalable, and compliant with enterprise requirements.

Conditional Access

• Design, configure, and manage Conditional Access policies.
• Control access based on:
• User identity
• Geographic location
• Device compliance
• Security conditions
• Other contextual factors

Monitor and optimize Conditional Access policies to balance security and user experience. Troubleshoot access issues resulting from Conditional Access policies.

Identity Governance & Privileged Access

• Establish and maintain enterprise Identity Governance frameworks.
• Implement and manage Privileged Identity Management (PIM).
• Manage elevated and privileged access.
• Implement least-privilege access principles.
• Review and audit privileged access and role assignments.
• Support access governance and compliance requirements.

Azure Security & Monitoring

• Implement security best practices across Microsoft Azure products, services, and solutions.
• Utilize Microsoft Sentinel / Azure Sentinel for security monitoring and incident detection.
• Create and manage security alerts.
• Develop automation scripts and workflows for incident response.Investigate identity-related security events and vulnerabilities.
• Support security incident response and remediation activities.

Production Support

• Provide production support for identity, authentication, and authorization services.
• Troubleshoot and resolve IAM-related production incidents.
• Investigate security incidents and implement corrective actions.
• Work with cross-functional teams to ensure identity solutions remain secure, compliant, and highly available.
• Perform root-cause analysis for recurring identity and authentication issues.

Collaboration & DevOps

• Collaborate with:
• Security Teams
• DevOps Teams
• Development Teams
• Infrastructure Teams
• Application Teams

Support application onboarding and identity integration requirements. Demonstrate a working understanding of DevOps tools, processes, and application deployment requirements. Partner with development teams to integrate secure authentication and authorization into applications.

Continuous Improvement

• Stay current with Microsoft Entra ID and Azure updates.
• Monitor emerging security threats, vulnerabilities, and identity security trends.
• Recommend improvements to strengthen the organization''s identity security posture.
• Continuously improve IAM processes, controls, automation, and operational efficiency.

Required Technical Skills

Microsoft Azure / Entra ID

• Microsoft Entra ID
• Azure Active Directory (Azure AD)
• Microsoft Azure
• Azure Identity & Access Management
• Azure Security
• Application Registration
• Enterprise Applications
• RBAC
• Conditional Access
• MFA
• SSO
• Identity Governance
• Privileged Identity Management (PIM)

Authentication & Federation

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML
• Authentication & Authorization
• Identity Federation
• Application Authentication

Security & Monitoring

• Microsoft Sentinel / Azure Sentinel
• Security Monitoring
• Security Alerts
• Incident Response
• Identity Security
• Access Governance
• Privileged Access Management

Automation & Scripting

• Windows PowerShell
• PowerShell scripting
• Automation
• Security automation / incident response automation

Required Qualifications

• 8–10 years of relevant IT/security experience.
• Strong hands‑on experience with Microsoft Entra ID / Azure AD.
• Strong understanding of enterprise IAM and identity security.
• Proven experience implementing MFA and SSO.
• Strong experience configuring Conditional Access policies.
• Hands‑on experience with RBAC and PIM.
• Strong knowledge of OAuth 2.0, OpenID Connect, and SAML.
• Experience onboarding and integrating enterprise applications with Entra ID.
• Experience with Microsoft Sentinel / Azure Sentinel.
• Strong PowerShell scripting and automation skills.
• Experience providing production support for identity and security solutions.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work effectively with security, development, DevOps, and infrastructure teams.