Senior Security Entra Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute comprehensive Microsoft Entra ID environments, encompassing tenant architecture, dynamic groups, administrative units, and scalable identity lifecycle management.

• Develop and implement Conditional Access, Global Secure Access, token protection, authentication strengths, MFA/passwordless solutions, PIM, RBAC, access reviews, and entitlement management.

• Manage hybrid identity design and troubleshooting across Entra Connect, Cloud Sync, Entra Connect Health, on-premises Active Directory, authentication methods, federation, and Entra Domain Services.

• Create and support identity federation and integration between Entra ID and identity providers such as Okta, Ping Identity, ADFS, and other SAML/OIDC solutions.

• Integrate applications utilizing SSO, SAML/OIDC, enterprise app registrations, SCIM provisioning, application proxy, and Global Secure Access.

• Design and implement Entra External ID for B2B/B2C scenarios aimed at partners and customers.

• Develop and implement workload identity solutions including Managed Identities and Workload Identity Federation.

• Investigate and address identity risks using Entra ID Protection, sign-in and audit logs, and recommendations from Entra.

• Promote hybrid identity hygiene, including the cleanup of stale objects, reduction of privileged accounts, and implementation of tiered administrator models.

• Support related Microsoft security initiatives involving Azure, Microsoft Purview, Intune, and Defender XDR.

• Independently manage technical delivery with a target utilization of 80%.

• Effectively manage time and communication within designated client engagements.

• Collaborate with principal consultants and oversee the identity workstream across diverse client environments.

• Contribute to the development of internal practices and facilitate knowledge sharing among projects.

• Perform additional responsibilities as assigned while adhering to GuidePoint Security's Core Values.

⛳️ Requirements

• Bachelor’s Degree.

• 3–5+ years of extensive, hands-on experience specifically in Microsoft Entra ID, alongside broader IT administration, identity management, or security operations experience.

• Profound working knowledge of Conditional Access, MFA/passwordless, PIM, RBAC, access reviews, and entitlement management.

• Strong practical experience with hybrid identity solutions, including Entra Connect/Cloud Sync and on-premises Active Directory.

• Familiarity with SAML, OAuth 2.0/OIDC, Kerberos, LDAP, and SCIM.

• Experience in integrating or migrating identity with providers such as Okta, Ping, ADFS, or similar into or alongside Entra ID.

• Ability to independently troubleshoot complex identity issues, including sign-in failures, synchronization errors, and token/claims challenges.

• Basic to intermediate PowerShell scripting skills for automation and reporting, including Microsoft Graph PowerShell.

• Experience in adopting emerging technologies, including AI tools.

• Strong problem-solving abilities and attention to detail.

• Excellent written and verbal communication skills for client-facing identity discussions.

• Capability for sedentary work.

• Significant movement of wrists, hands, and/or fingers for at least 8 hours a day.

• Close visual acuity for computer-terminal viewing and/or extensive reading for a minimum of 8 hours a day.

🏝️ Benefits

• Primarily remote workforce (U.S. based only).

• Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint covering 90% of the employee premium and 70% of family-plan premiums, or High Deductible Health Plan with HSA where GuidePoint covers 100% of the employee premium and 75% of family-plan premiums.

• HSA contribution of $850 annually for employees or $1,750 annually for family coverage.

• Group Dental Insurance with GuidePoint paying 100% of the employee premium and 75% of family-plan premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Generous mobile phone and home internet allowance.

• Eligibility for retirement plan after 2 months at open enrollment.

• Pet Benefit Option.

• Company events.

• Collaboration, mentorship, and guidance from experienced colleagues.