> Markdown version of [/jobs/ext/2702362-cloud-identity-engineer-expert](https://www.wearedevelopers.com/jobs/ext/2702362-cloud-identity-engineer-expert). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Identity Engineer (Expert)

- **Company:** BAE Systems
- **Location:** Herndon, VA, United States
- **Salary:** $149,603.0 - $254,317.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Active Directory Federation Services, Microsoft Azure, Cloud Engineering, Data Security, Identity and Access Management, Virtual Desktops, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Kusto Query Language, Zero Trust Network Access, Security Assertion Markup Language (SAML), Azure Powershell, Azure Security Center, Information Technology
- **Published:** September 4, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9143635/cloud-identity-engineer-expert

## About the Role

Bachelor's degree in Computer Science, Information Technology, or related field.
-11+ years of experience in designing, implementing, and managing large-scale Azure and M365 environments.
-Strong technical skills in Azure and M365, including:

 * Azure Active Directory (AAD)
 * Azure Information Protection (AIP)
 * Microsoft 365 Security & Compliance
 * Azure Storage
 * Azure Security Center
 * Azure Monitor
 * PowerShell
 * Azure CLI
 * Microsoft Sysinternals Toolsuite
 * Role based access control
 * Conditional Access and MFA
 * FSLogix Profiles
 * Azure Virtual Desktop (AVD)

-Excellent communication and collaboration skills, with the ability to work with cross-functional teams and stakeholders.
-Strong problem-solving skills, with the ability to troubleshoot and resolve complex Azure and M365 issues.
-Certifications in Azure and M365, such as Microsoft Certified: Identity and Access Administrator Associate.

Preferred Education, Experience, & Skills

 * Familiarity with Azure, Microsoft 365, and Active Directory Domain Services (AD DS)
 * Experience with PowerShell and Kusto Query Language (KQL)
 * Certifications:
 + Azure Solutions Architect Expert
 + Microsoft 365 Certified: Enterprise Administrator Expert

## Description

We are looking for a candidate with 11+ years of experience and a strong Cloud Engineering background to join our technology-based program supporting a key government customer. The candidate must function as a Expert level Cloud Engineer with experience managing Azure and M365 environments. This program is responsible for delivering and maintaining a full enterprise platform with enterprise services for end users that will eventually replace the entire Enterprise suite of services that exist today for the customer., *

 + Design and implement identity solutions using Microsoft Entra ID (formerly Azure AD), including hybrid identity setups and federation services like ADFS.
 + Configure and maintain Conditional Access policies to enforce security and compliance across users, devices, and applications.
 + Manage entitlement group systems to ensure proper role-based access control (RBAC) and lifecycle automation.
 + Leverage security tools such as Defender for Identity and Azure Identity Protection to detect and respond to identity-based threats.
 + Support Zero Trust principles by enforcing least privilege access and continuous verification across identity workflows.
 + Troubleshoot and resolve IAM issues, including authentication failures, access anomalies, and policy misconfigurations.
 + Collaborate with cross-functional teams to align identity strategies with business requirements and regulatory standards.
 + Document identity architectures and procedures to support operational continuity and knowledge sharing.
 + Stay current with identity protocols like OAuth 2.0, OpenID Connect, SAML, and SCIM, and integrate them into secure solutions.
ABC
#LI-DDUNN


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)