Microsoft Entra ID Lead

Cloud88Inc; Chicago (IL); On-site; USD 140,000 - 170,000; Full time

Job summary

Cloud88Inc is seeking an experienced Microsoft Entra ID Lead to drive enterprise IAM initiatives in Chicago. You will design secure authentication solutions, onboard applications, and troubleshoot complex issues, collaborating with security, infrastructure, and engineering teams.

The role requires 8+ years in IAM, hands-on Entra ID expertise, and deep knowledge of OAuth/OIDC/SAML/SCIM, CA, MFA, and SSO. You will guide enterprise app onboarding and API security efforts.

Qualifications

• 8+ years IAM / Identity Security experience.
• Hands-on with Microsoft Entra ID / Azure AD.
• Knowledge of IAM concepts and architecture.
• Experience with OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0.
• Experience with Conditional Access, MFA, Identity Protection, PIM, Access Reviews, Lifecycle Workflows.
• Experience with App Registrations and Enterprise Applications.
• Experience onboarding enterprise apps and implementing SSO/federation.
• Strong understanding of OAuth flows, tokens, claims, scopes, and certs.
• Experience with B2B, External Identities, Cross-Tenant Access.
• Understanding auth, authorization, federation, token-based auth, API security.
• Troubleshooting SSO, authentication, federation, CA, token issues.
• Ability to lead technical discussions with engineering teams.
• Excellent communication, documentation, collaboration, and problem solving.

Responsibilities

• Lead design, implementation, administration, and support of Entra ID / Azure AD solutions.
• Manage users, groups, enterprise apps, app registrations, service principals, and identities.
• Design and implement CA, MFA, Identity Protection, PIM, Access Reviews, Lifecycle Workflows.
• Lead enterprise app onboarding and secure SSO integrations.
• Configure and troubleshoot OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0 integrations.
• Support B2B collaboration, External Identities, guest access, cross-tenant access.
• Define authentication/authorization requirements with app owners and engineering teams.
• Configure OAuth flows and app registrations, certificates, secrets, and consent.
• Troubleshoot tokens, claims, and SSO/authentication failures.
• Analyze sign-in logs, audit logs, and CA results to identify root causes.
• Provide IAM architecture guidance and best practices.
• Collaborate with security, infra, cloud, and business teams on scalable identity solutions.
• Lead RCA for production IAM incidents.

Skills

Entra ID / Azure AD

IAM / Identity Security

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

Conditional Access

MFA

PIM / Access Reviews

SSO / Federation

App Registrations / Enterprise Apps

OAuth flows / tokens

B2B / External Identities

API security

Technical leadership

Tools

Microsoft Graph API

PowerShell

Job description

We are seeking an experienced Microsoft Entra ID Lead with strong hands‑on expertise in Microsoft Entra ID (Azure AD), Identity & Access Management (IAM), application authentication, federation, SSO, and API security. The ideal candidate will lead enterprise identity initiatives, design secure authentication solutions, onboard applications, troubleshoot complex authentication issues, and work closely with application, security, infrastructure, and engineering teams.

Key Responsibilities

• Lead the design, implementation, administration, and support of Microsoft Entra ID / Azure AD solutions.
• Manage users, groups, enterprise applications, app registrations, service principals, and managed identities.
• Design and implement Conditional Access, MFA, Identity Protection, Privileged Identity Management (PIM), Access Reviews, and Lifecycle Workflows.
• Lead enterprise application onboarding and implement secure Single Sign-On (SSO) integrations.
• Design, configure, and troubleshoot integrations using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and SCIM 2.0.
• Support B2B collaboration, External Identities, guest access, and cross‑tenant access configurations.
• Work with application owners and engineering teams to define authentication and authorization requirements.
• Configure and support OAuth flows including:
• Authorization Code Flow
• Authorization Code Flow with PKCE
• Configure and manage App Registrations, Enterprise Applications, scopes, API permissions, redirect URIs, certificates, client secrets, and consent.
• Troubleshoot access tokens, ID tokens, claims, scopes, authentication failures, authorization issues, federation problems, and SSO issues.
• Analyze Entra ID sign‑in logs, audit logs, Conditional Access results, and authentication transactions to identify root causes.
• Implement secure authentication and authorization patterns for enterprise applications and APIs.
• Understand and troubleshoot the complete authentication lifecycle from user sign‑in and authentication through token issuance, claims processing, and application authorization.
• Provide technical leadership and guidance on IAM architecture, identity security, authentication standards, and Entra ID best practices.
• Partner with security, infrastructure, cloud, application, and business teams to deliver scalable identity solutions.
• Lead troubleshooting and root‑cause analysis for complex production IAM and authentication incidents.

Required Skills

• 8+ years of overall IAM / Identity Security experience.
• Strong hands‑on experience with Microsoft Entra ID / Azure Active Directory.
• Strong knowledge of Identity & Access Management (IAM) concepts and architecture.
• Strong hands‑on experience with OAuth 2.0, OIDC, SAML 2.0, and SCIM 2.0.
• Experience with Conditional Access, MFA, Identity Protection, PIM, Access Reviews, and Lifecycle Workflows.
• Strong experience with App Registrations and Enterprise Applications.
• Experience onboarding enterprise applications and implementing SSO and federation.
• Strong understanding of OAuth flows, JWT/access tokens, ID tokens, claims, scopes, API permissions, consent, certificates, and client secrets.
• Experience with B2B Collaboration, External Identities, and Cross‑Tenant Access.
• Strong understanding of authentication, authorization, federation, token‑based authentication, and API security.
• Strong troubleshooting skills for SSO, authentication, federation, Conditional Access, and token‑related issues.
• Ability to lead technical discussions and provide guidance to application and engineering teams.
• Excellent communication, documentation, collaboration, and problem‑solving skills.

Preferred Skills

• Experience supporting IAM solutions within a large enterprise or banking/financial services environment.
• Experience with Microsoft Graph API, PowerShell, and identity automation.
• Understanding of Zero Trust security principles and identity governance.
• Experience integrating Entra ID with cloud, SaaS, and internally developed applications.
• Previous experience working as an Entra ID Lead, IAM Lead, Identity Security Lead, or Senior Entra ID Engineer.