Key Responsibilities
- Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments.
- Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities.
- Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM.
- Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews.
- Configure and integrate Microsoft security technologies including Defender for Identity, Sentinel, and Identity Protection.
- Develop identity security standards, roadmaps, and technical recommendations.
- Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity.
- Support audits, compliance initiatives, and security assessments.
Required Qualifications
- 5+ years of Identity and Access Management (IAM) experience.
- Strong experience with:
- Active Directory
- Microsoft Entra ID (Azure AD)
- Hybrid Identity
- Conditional Access
- Privileged Identity Management (PIM)
- Microsoft Defender for Identity
- Microsoft Sentinel
- Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, and SCIM.
- Strong PowerShell scripting and automation skills.
- Experience implementing identity governance and privileged access controls.
- Understanding of Zero Trust security principles and Microsoft security best practices.
Preferred Qualifications
- Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100)
- CISSP or equivalent security certification
- Experience with Microsoft Purview, CyberArk, SailPoint, or Okta
- Experience supporting enterprise security and compliance initiatives