Senior Identity & Security Engineer

Summary

We are looking for a Senior Identity & Security Engineer with strong experience across Microsoft Entra ID, federation, authentication, NTLM / LDAP, groups, Conditional Access, and PIM.

The role will take ownership of sign-in, federation, NTLM / LDAP, group-related topics, and privileged access.

Key Responsibilities

• Own topics related to sign-in, federation, NTLM / LDAP, groups, PIM, and Conditional Access.
• Support the Entra Connect PTA-to-PHS cutover.
• Manage Seamless SSO and synchronization retirement activities.
• Migrate applications from AD FS to Entra SSO.
• Support application authentication using SAML / OIDC.
• Audit and remediate NTLM and LDAP signing.
• Support Kerberos.
• Manage Conditional Access, break-glass, and PIM.
• Support HR-driven group and source-of-authority design.

Required Technical Experience

• Strong experience with Microsoft Entra ID and Entra Connect.
• Experience with Pass-through Authentication (PTA) and Password Hash Synchronization (PHS).
• Experience with Seamless SSO.
• Experience migrating applications from AD FS to Entra SSO.
• Strong knowledge of SAML / OIDC.
• Experience with NTLM, LDAP signing, and Kerberos.
• Strong knowledge of Conditional Access.
• Experience with Privileged Identity Management (PIM).
• Experience with break-glass access.
• Experience with HR-driven group and source-of-authority design.

Relevant Microsoft Certifications

Relevant Microsoft certifications are considered beneficial, for example:

• SC-300 – Microsoft Identity and Access Administrator