M365 & Entra ID Engineer — Identity & Security Lead

States Manufacturing Corporation; Waco, Northern (TX, KY); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Forgent Power is seeking an Infra Engineer III, M365 & Identity to own and govern the Microsoft identity and productivity platform across all sites. You will be the single point of accountability for Entra ID, Conditional Access, Privileged Identity Management, and the full Microsoft 365 security suite enabled by E5 licensing.

You will join during a pivotal migration to a single governed platform with a July 1 go-live deadline, ensuring identity and access governance across the organization from

Qualifications

• 7–10 years of experience in Microsoft identity and enterprise Microsoft 365 engineering.
• Deep hands-on expertise with Entra ID — user and group management, Conditional Access, hybrid identity, and B2B collaboration.
• Proven experience implementing and operating Privileged Identity Management in a production enterprise environment.
• Strong understanding of hybrid identity — Entra Connect, password hash sync, pass-through authentication, and Active Directory Federation Services.
• Experience with Microsoft Purview, including Data Loss Prevention policy design and compliance reporting.
• Hands-on experience with Defender for Identity sensor deployment and alert management.
• Solid understanding of Intune device compliance and its integration with Conditional Access.
• Strong documentation skills — ability to produce runbooks, policy guides, and change management documentation.
• Hands-on experience configuring enterprise Single Sign-On integrations using SAML 2.0, OAuth 2.0, and OpenID Connect.

Responsibilities

• Own Entra ID governance and operation across all Forgent entities, including access reviews and lifecycle management.
• Design and enforce Conditional Access policies aligned to Zero Trust principles.
• Lead Privileged Identity Management and just-in-time role activation for admin roles.
• Manage hybrid identity synchronization and health between on-prem AD and Entra ID.
• Implement Defender for Identity and integrate with Defender XDR for identity threat detection.
• Configure Purview DLP policies to protect data across Exchange Online, SharePoint, Teams and endpoints.
• Oversee M365 administration and licensing across entities; coordinate with other engineers for Teams, Exchange, and OneDrive configurations.
• Document runbooks, policy guides, and change-management procedures.

Skills

Entra ID management

Conditional Access

Privileged Identity Management

Hybrid identity

Defender for Identity

Intune device compliance

SCIM provisioning

SSO and application integration

Tools

Entra Connect

Microsoft Purview

Defender for Identity

Intune

SCIM

Job description

Forgent Power is seeking an Infra Engineer III, M365 & Identity to own and govern the Microsoft identity and productivity platform across all sites. You will be the single point of accountability for Entra ID, Conditional Access, Privileged Identity Management, and the full Microsoft 365 security suite enabled by E5 licensing.

You will join during a pivotal migration to a single governed platform with a July 1 go-live deadline, ensuring identity and access governance across the organization from