Senior Identity Engineer — Entra ID & Access Security

Lockton Companies; Kansas City (MO); On-site; USD 120,000 - 150,000; Full time

Job summary

Lockton Companies in Kansas City, MO is seeking a Senior Identity Engineer – Operations to design, operate, and secure Microsoft Entra ID across the enterprise. You will own identity governance, Conditional Access, privileged access, application identities, and modern authentication controls, while partnering with security, platform, and regional teams to maintain secure, audit-ready identity services.

This role requires deep expertise in hybrid identity, MFA, and passwordless approaches, along

Qualifications

• Engineer, operate, and secure Microsoft Entra ID in an enterprise environment, including hybrid identity with AD and Entra Connect.
• Design, implement, and maintain Conditional Access policies enforcing MFA and Zero Trust across scenarios.
• Define and enforce identity standards ensuring MFA and risk-based controls are applied.
• Review admin consent for third-party enterprise app integrations.
• Own app registrations, secrets, and certificate lifecycle management.
• Design Graph permission models for apps and identity automation.
• Define standards to prevent interactive sign-in for service accounts.
• Implement Entra Privileged Identity Management (PIM) for admin roles and Just-In-Time elevation.
• Operate Entra Administrative Units for delegated identity management across regions.
• Support passwordless authentication (FIDO2) and external identity scenarios.
• Partner with teams to deliver secure Azure access models.
• Escalate complex identity incidents and produce audit-ready documentation.
• Understand Microsoft 365 identity integrations with Entra ID.

Responsibilities

• Own identity governance and access controls across the enterprise.
• Manage Conditional Access, MFA, and device trust configurations.
• Onboard enterprise applications and manage admin consent.
• Support passwordless methods and external identity scenarios.
• Collaborate with platform and security teams on Azure access models.
• Serve as escalation point for complex identity incidents.
• Produce audit-ready documentation for compliance.

Skills

Microsoft Entra ID

Hybrid identity

Conditional Access

Zero Trust

Identity governance

MFA

Privileged access management

Job description

Lockton Companies in Kansas City, MO is seeking a Senior Identity Engineer – Operations to design, operate, and secure Microsoft Entra ID across the enterprise. You will own identity governance, Conditional Access, privileged access, application identities, and modern authentication controls, while partnering with security, platform, and regional teams to maintain secure, audit-ready identity services.

This role requires deep expertise in hybrid identity, MFA, and passwordless approaches, along