Senior Azure Entra ID Security Engineer

Staffing Spot, Inc.; Charlotte (NC); Presencial; USD 140.000 - 175.000; Jornada completa

Descripción de la vacante

Staffing Spot, Inc. seeks a Senior Azure / Entra ID Security Engineer to architect and secure hybrid identity ecosystems. You will leverage Entra ID, CA, MFA, SSO, and PIM to harden access across cloud and on-prem environments.

Responsibilities include implementing Connect Sync, monitoring logs, and automating identity tasks with PowerShell and Graph. Collaboration with infra and security teams is essential.

Formación

• Extensive experience with Microsoft Entra ID and hybrid identity architectures.
• Proficient in configuring CA, MFA, SSO, and identity protection.
• Strong scripting with PowerShell and Microsoft Graph.
• Experience troubleshooting AD, DNS, Kerberos, and auth issues.

Responsabilidades

• Design, implement, and manage Microsoft Entra ID and hybrid identity solutions.
• Administer on-premises AD including users, groups, GPOs, DNS, and replication.
• Configure and maintain Entra Connect Sync and Cloud Sync.
• Troubleshoot synchronization failures, UPN conflicts, and auth issues.
• Implement least-privilege access, access reviews, and identity governance.
• Manage application registrations, service principals, certificates, and secrets.
• Automate identity management and reporting with PowerShell and Microsoft Graph.
• Monitor sign-in/audit logs and perform root-cause analysis of security incidents.
• Collaborate with infrastructure, cybersecurity, and application teams.

Conocimientos

Azure

Entra ID

Conditional Access

MFA

SSO

PIM

PowerShell

Microsoft Graph

Hybrid Identity

PHS

PTA

SAML 2.0

OAuth 2.0

OpenID Connect

Kerberos

Descripción del empleo

Staffing Spot, Inc. seeks a Senior Azure / Entra ID Security Engineer to architect and secure hybrid identity ecosystems. You will leverage Entra ID, CA, MFA, SSO, and PIM to harden access across cloud and on-prem environments.

Responsibilities include implementing Connect Sync, monitoring logs, and automating identity tasks with PowerShell and Graph. Collaboration with infra and security teams is essential.