> Markdown version of [/jobs/ext/1291362-microsoft-entra-id-engineer](https://www.wearedevelopers.com/jobs/ext/1291362-microsoft-entra-id-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Entra ID Engineer - **Company:** Iris Consulting Corporation - **Location:** Sandy Springs, GA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, User Authentication, Microsoft Azure, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OpenID, Public Key Infrastructure, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Microsoft InTune, Information Technology - **Published:** July 16, 2026 - **Apply:** https://dejobs.org/x/x/47587B12990640439904265B4291F0D1/job/ ## About the Role * 5+ years of hands-on directory services engineering, including extensive experience supporting and troubleshooting on-premises Active Directory (authentication, Client, GPO, LDAP) * Demonstrated experience executing AD to Entra ID migrations in complex enterprise environments * Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass-through Authentication, ADFS) * Hands-on experience with Microsoft Intune, including device compliance and Entra ID Join and Hybrid Join * Experience with Conditional Access, MFA, and identity protection in a cloud-first model * Solid grasp of AD security, common vulnerabilities and safeguards, and Tier-0 security boundaries * Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC) * Working familiarity with Azure environments * Ability to author technical documentation and conduct knowledge transfer sessions, * Experience planning and running phased migration waves with defined pilot cohorts and rollback criteria * Familiarity with GPO-to-Intune policy migration * Experience with certificate services and cloud PKI approaches * Prior work in financial services or other highly regulated industries * Bachelor's degree in Computer Science or equivalent training, education, and work experience Contractor Requirements * Must be based in the United States and authorized to work without sponsorship * Must be available for occasional on-site travel (expenses covered by the client) * Must be able to pass a background check ## Description We are looking for an experienced Active Directory and Microsoft Entra ID engineer to lead the hands-on execution of an on-premises Active Directory to Entra ID migration for a large fintech organization. Working under the direction of a solution architect, you will own the build, configuration, migration, testing, and documentation work throughout the project. This role is well-suited for a deeply technical engineer who is comfortable operating with ambiguity in a complex enterprise environment and who has migrated real AD estates before. Experience in banking, financial services, or other regulated industries is a strong plus., * Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies * Contribute to migration design and tool selection alongside the architect * Perform Entra ID configuration, identity synchronization, and authentication setup * Run test migrations, then migrate and validate users, groups, and service accounts * Configure identity security controls including MFA, Conditional Access, and self-service password reset * Support endpoint and device management integration through Microsoft Intune * Produce as-built documentation and deliver administrator training and operational handoff ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)