Senior Microsoft Entra Id & Zero Trust Specialist (Contract) - Isb9303414

iSanqa Resourcing; Gauteng; Hybrid; ZAR 1,000,000 - 1,500,000; Full time

Job summary

iSanqa Resourcing seeks a Senior Microsoft Entra ID & Zero Trust Specialist to join the core Digital Identity domain within their global IT Hub, overseeing enterprise authentication platforms. You will own identity-driven Zero Trust workstreams, including Conditional Access policies, FIDO2 deployments, and guest lifecycle governance, while automating infrastructure with Terraform and PowerShell.

The role targets a senior professional with 6–8 years of related experience, adept at modern

Qualifications

• Degree in Computer Science, Communications Engineering, or comparable qualification.
• Minimum of 5 years IT sector experience including international project exposure.
• Proven track record managing large-scale enterprise cloud and hybrid environments.
• Experience working in Agile delivery environments.

Responsibilities

• Define, deploy, and manage enterprise Conditional Access policies and FIDO2 rollouts.
• Maintain security posture and high availability of Active Directory and Entra ID environments serving 100,000+ accounts.
• Design and implement automated workflows and IaC configurations using Terraform, PowerShell, and Azure Functions.
• Drive enterprise IT security strategy across authentication platforms and Zero Trust architectures.
• Collaborate with global interface partners, security architects, and multicultural project teams.

Skills

Microsoft Entra ID

Zero Trust

Identity & Access Management

OAuth/OIDC/SAML

Automation

Terraform

PowerShell

Active Directory

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

PowerShell

Azure Functions

Job description

Our Client is looking for a Senior Microsoft Entra ID & Zero Trust Specialist to join the core Digital Identity domain within their global IT Hub, driving the enterprise Authentication Platforms product.

This team holds end-to-end global responsibility for Active Directory and Microsoft Entra ID across more than 100,000 user accounts worldwide, ensuring continuous high availability and top-tier identity security. In this role, you will take ownership of identity-driven Zero Trust workstreams-including Conditional Access policies, FIDO2 deployments, and guest lifecycle governance-while automating infrastructure using Terraform and PowerShell.

Who This Role Would Suit:

This role is ideal for a Senior Identity Engineer, Cloud Security Specialist, or IAM Architect who excels at securing massive, hybrid Microsoft enterprise environments. It is a perfect fit for a professional passionate about modern authentication (OAuth/OIDC/SAML), FIDO2 passwordless access, and Zero Trust architectures who leverages Terraform and PowerShell automation to replace manual administrative workflows.

• Microsoft Identity & Architecture Expertise: Minimum 3+ years of specialized implementation and support experience across Microsoft Enterprise IAM architectures, with expert-level administration of Microsoft Entra ID, Entra ID Connect, and on-premises Active Directory.
• Zero Trust & Modern Authentication: Advanced proficiency in Zero Trust architecture concepts, authentication protocols (SAML, OAuth 2.0, OIDC), and the design of enterprise Entra ID security frameworks.
• Automation & Infrastructure as Code (IaC): Advanced experience automating identity platforms using Infrastructure as Code (Terraform, PowerShell, Azure Functions, or comparable technologies) within hybrid Azure environments.

Position Details:

• Contract Dates: 2026 Start (TBD / Multi-Year Allocation)
• Location: Midrand / Menlyn / Rosslyn / Home Office Rotation
• Level: Senior (6-8 Years related experience)

Qualifications & Experience:

• Successfully completed Degree in Computer Science, Communications Engineering, or comparable qualification.
• Minimum of 5 years of professional IT sector experience (including international project exposure).
• Proven track record managing and securing large-scale enterprise cloud and hybrid environments.
• Practical experience working inside collaborative, Agile delivery environments.

Essential Skills & Technologies:

Identity & Access Management:

• Min. 3 years of professional experience implementing and supporting Microsoft Enterprise IAM architectures.
• Expert implementation and administration of Microsoft Entra ID, Entra ID Connect, and Active Directory.
• Advanced knowledge of modern authentication protocols: SAML, OAuth, and OIDC.
• Development and operational enforcement of Entra ID security concepts and governance models.

Zero Trust & Automation:

• Advanced skill level in Zero Trust architecture concepts and components.
• Advanced experience with Infrastructure as Code (IaC) and automation tooling: Terraform, PowerShell, and Azure Functions.
• Analytical troubleshooting skills to coordinate, diagnose, and resolve complex identity issues.

Advantageous Skills:

• Advanced hands-on experience operating hybrid cloud architectures on Microsoft Azure.
• Practical familiarity with Agile working methodologies and sprint cadences.
• Strong internal and external stakeholder communication skills within distributed global teams.
• Self-organizing mindset with a delivery focus on continuous improvement and automation.

Key Responsibilities:

• Zero Trust Policy Engineering: Define, deploy, and manage enterprise Conditional Access policies, FIDO2 passwordless rollouts, and secure external/guest account lifecycle processes.
• Global Identity Administration: Maintain the security posture and high availability of global Active Directory and Entra ID environments serving 100,000+ accounts.
• IaC & Automation: Design and implement automated workflows and Infrastructure as Code configurations using Terraform, PowerShell, and Azure Functions.
• Security & Strategy Execution: Drive the enterprise IT security strategy across authentication platforms, establishing secure service-to-service and user-to-service access.
• Cross-Functional Collaboration: Partner with global interface partners, security architects, and multicultural project teams across the organization.

Important Application Details

Location & Relocation

Applicants based outside of Gauteng must be willing to relocate to Midrand/Menlyn/Rosslyn. Please note that relocation to the province will be at the candidate's own cost.

Eligibility & Legal

• Citizenship: South African citizens and residents are preferred.
• Work Permits: Candidates with valid work permits will be considered.
• Privacy: By applying, you consent to being added to our database and receiving updates until you unsubscribe.

#isanqa #isanqaresourcing #fuelledbypassionintegrityexcellence #thegroup #EntraID #MicrosoftEntraID #ZeroTrust #ActiveDirectory #AzureAD #IAM #IdentityAndAccessManagement #ConditionalAccess #FIDO2 #SAML #OAuth #Terraform #PowerShell #AzureFunctions #CloudSecurity #DevOps #TechJobsSA #GlobalTechJobs