Senior Entra ID Engineer — Access & Identity Governance

Kalles Group; Seattle (WA); Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K with matching

PTO for salaried employees

Work-life balance

Job summary

Kalles Group is seeking an Entra ID Engineer Consultant to lead a major identity migration and govern access across enterprise apps. You will own design, build, and operation of access management and governance in Entra, with strong emphasis on phishing-resistant MFA, PIM, SSO, and B2B controls.

The role is hybrid and based in Seattle, WA, with collaboration across SecOps and development teams. You will mentor engineers, define engineering standards, and automate using Graph PowerShell and IaC

Qualifications

• Bachelor's or master's in CS, cybersecurity, IT, or equivalent experience.
• 4+ years in IAM or security engineering with leadership experience.
• Deep hands-on Entra ID: Conditional Access, authentication methods, PIM, Entra ID Protection.
• Entra ID Governance: entitlement management, access reviews, lifecycle workflows.
• Expert knowledge of SAML, OAuth 2.0, OIDC, SCIM and security implications.
• Hybrid identity: Entra Connect/Cloud Sync with on-prem AD; governing access across both.
• Automating Entra via Microsoft Graph API/Graph PowerShell; PowerShell, Python; Terraform/Bicep.
• System-level design thinking; autonomous work style.

Responsibilities

• Design and maintain Conditional Access architecture with persona/risk-based policies.
• Own authentication methods strategy and rollout: passwordless MFA methods.
• Administer Privileged Identity Management (PIM) and approvals.
• Manage enterprise app SSO (SAML/OIDC) and SCIM provisioning.
• Design external identity/B2B controls and cross-tenant access.
• Build and operate Entitlement Management: access packages, policies, workflows.
• Design and run Access Reviews across groups, apps, guests, with automation.
• Implement HR-driven Lifecycle Workflows and inbound/outbound provisioning.

Skills

IAM experience

Security engineering

Entra ID hands-on

SAML / OAuth / OIDC

Microsoft Graph API

PowerShell

Terraform / Bicep

Education

Bachelor's/Master's in CS, Cybersecurity, IT or equivalent

Tools

Microsoft Entra ID

Microsoft Graph API

PowerShell

Terraform / Bicep

SailPoint ISC/IdentityNow

Entra Connect

Job description

Kalles Group is seeking an Entra ID Engineer Consultant to lead a major identity migration and govern access across enterprise apps. You will own design, build, and operation of access management and governance in Entra, with strong emphasis on phishing-resistant MFA, PIM, SSO, and B2B controls.

The role is hybrid and based in Seattle, WA, with collaboration across SecOps and development teams. You will mentor engineers, define engineering standards, and automate using Graph PowerShell and IaC