Senior Microsoft Entra Id & Zero Trust Specialist (Contract) - Gauteng/Hybrid - Isb9303414

iSanqa Resourcing; Gauteng; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

iSanqa Resourcing seeks a Senior Microsoft Entra ID & Zero Trust Specialist to own identity-driven security within a global IT hub. You will manage Entra ID, AD, and guest lifecycle, while implementing Zero Trust controls and automation via Terraform and PowerShell across hybrid Azure environments.

The role targets professionals skilled in modern authentication protocols and large-scale identity governance, with global collaboration across distributed teams and multi-site deployments.

Qualifications

• Minimum 3+ years of specialized implementation across Microsoft Identity architectures.
• Expert administration of Entra ID, Entra ID Connect, and Active Directory.
• Strong knowledge of modern authentication protocols (SAML, OAuth, OIDC).
• Experience automating identity platforms in hybrid Azure environments.

Responsibilities

• Define, deploy, and manage Conditional Access policies and FIDO2 rollouts.
• Maintain high availability of global AD and Entra ID environments serving 100,000+ accounts.
• Design and implement IaC workflows using Terraform, PowerShell, and Azure Functions.
• Drive security strategy across authentication platforms and access governance.
• Collaborate with global teams and security architects on IAM initiatives.

Skills

Microsoft Entra ID

Active Directory

Zero Trust

Terraform

PowerShell

Azure Functions

SAML

OAuth

OIDC

Agile delivery

FIDO2

Education

Degree in Computer Science or related

Tools

Terraform

PowerShell

Azure Functions

Job description

Our Client is looking for a Senior Microsoft Entra ID & Zero Trust Specialist to join the core Digital Identity domain within their global IT Hub, driving the enterprise Authentication Platforms product.

This team holds end-to-end global responsibility for Active Directory and Microsoft Entra ID across more than 100,000 user accounts worldwide, ensuring continuous high availability and top-tier identity security. In this role, you will take ownership of identity-driven Zero Trust workstreams including Conditional Access policies, FIDO2 deployments, and guest lifecycle governance while automating infrastructure using Terraform and PowerShell.

Who This Role Would Suit:

This role is ideal for a Senior Identity Engineer, Cloud Security Specialist, or IAM Architect who excels at securing massive, hybrid Microsoft enterprise environments. It is a perfect fit for a professional passionate about modern authentication (OAuth/OIDC/SAML), FIDO2 passwordless access, and Zero Trust architectures who leverages Terraform and PowerShell automation to replace manual administrative workflows.

• Microsoft Identity & Architecture Expertise: Minimum 3+ years of specialized implementation and support experience across Microsoft Enterprise IAM architectures, with expert-level administration of Microsoft Entra ID, Entra ID Connect, and on-premises Active Directory.
• Zero Trust & Modern Authentication: Advanced proficiency in Zero Trust architecture concepts, authentication protocols (SAML, OAuth 2.0, OIDC), and the design of enterprise Entra ID security frameworks.
• Automation & Infrastructure as Code (IaC): Advanced experience automating identity platforms using Infrastructure as Code (Terraform, PowerShell, Azure Functions, or comparable technologies) within hybrid Azure environments.

Position Details:

• Contract Dates: 2026 Start (TBD / Multi-Year Allocation)
• Location: Midrand / Menlyn / Rosslyn / Home Office Rotation
• Level: Senior (6-8 Years related experience)

Qualifications & Experience:

• Successfully completed Degree in Computer Science, Communications Engineering, or comparable qualification.
• Minimum of 5 years of professional IT sector experience (including international project exposure).
• Proven track record managing and securing large-scale enterprise cloud and hybrid environments.
• Practical experience working inside collaborative, Agile delivery environments.

Essential Skills & Technologies:

Identity & Access Management:

• Min. 3 years of professional experience implementing and supporting Microsoft Enterprise IAM architectures.
• Expert implementation and administration of Microsoft Entra ID, Entra ID Connect, and Active Directory.
• Advanced knowledge of modern authentication protocols: SAML, OAuth, and OIDC.
• Development and operational enforcement of Entra ID security concepts and governance models.

Zero Trust & Automation:

• Advanced skill level in Zero Trust architecture concepts and components.
• Advanced experience with Infrastructure as Code (IaC) and automation tooling: Terraform, PowerShell, and Azure Functions.
• Analytical troubleshooting skills to coordinate, diagnose, and resolve complex identity issues.

Advantageous Skills:

• Advanced hands-on experience operating hybrid cloud architectures on Microsoft Azure.
• Practical familiarity with Agile working methodologies and sprint cadences.
• Strong internal and external stakeholder communication skills within distributed global teams.
• Self-organizing mindset with a delivery focus on continuous improvement and automation.

Key Responsibilities:

• Zero Trust Policy Engineering: Define, deploy, and manage enterprise Conditional Access policies, FIDO2 passwordless rollouts, and secure external/guest account lifecycle processes.
• Global Identity Administration: Maintain the security posture and high availability of global Active Directory and Entra ID environments serving 100,000+ accounts.
• IaC & Automation: Design and implement automated workflows and Infrastructure as Code configurations using Terraform, PowerShell, and Azure Functions.
• Security & Strategy Execution: Drive the enterprise IT security strategy across authentication platforms, establishing secure service-to-service and user-to-service access.
• Cross-Functional Collaboration: Partner with global interface partners, security architects, and multicultural project teams across the organization.

Location & Relocation

Applicants based outside of Gauteng must be willing to relocate to Midrand/Menlyn/Rosslyn. Please note that relocation to the province will be at the candidate's own cost.

Eligibility & Legal

• Citizenship: South African citizens and residents are preferred.
• Work Permits: Candidates with valid work permits will be considered.
• Privacy: By applying, you consent to being added to our database and receiving updates until you unsubscribe.

#isanqa #isanqaresourcing #fuelledbypassionintegrityexcellence #thegroup #EntraID #MicrosoftEntraID #ZeroTrust #ActiveDirectory #AzureAD #IAM #IdentityAndAccessManagement #ConditionalAccess #FIDO2 #SAML #OAuth #Terraform #PowerShell #AzureFunctions #CloudSecurity #DevOps #TechJobsSA #GlobalTechJobs