> Markdown version of [/jobs/ext/3037547-microsoft-entra-id-engineer-ii](https://www.wearedevelopers.com/jobs/ext/3037547-microsoft-entra-id-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Entra ID Engineer II - **Company:** AARP - **Location:** Washington, DC, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Antivirus, Application Integration Architecture, Confluence, JIRA, User Authentication, Authentication Protocols, Microsoft Azure, Cloud Computing, Dynamic Host Configuration Protocol, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Networking Hardware, Network Service, OAuth, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Google Cloud, Enterprise Software Applications, Cyberark, Web Filtering, Fortinet, Api Design, Network Server, Devsecops, Cisco, Servicenow - **Published:** September 23, 2026 - **Apply:** https://careers.aarp.org/jobs/7468?lang=en-us ## About the Role * 5+ years of hands-on experience managing Microsoft identity and network services, including Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) services with Microsoft and Infoblox solutions, as well as Secure DNS and content filtering services with Cisco Umbrella and Fortinet FortiGate, for large-scale enterprises with a variety of endpoints (e.g., laptops, servers, networking equipment, IoT devices, etc.). * 3+ years of hands-on experience engineering and administering Microsoft Entra ID (formerly Azure AD), including Entra tenant configuration, identity and access management, Microsoft 365 Multi-Factor Authentication (MFA), Conditional Access Policies, Enterprise Applications, Single Sign-On (SSO), application registration, and integration with on-premises Active Directory; experience with Privileged Access Management (PAM) solutions such as CyberArk is preferred. * Demonstrated ability to troubleshoot complex Microsoft Entra ID authentication and identity issues, including SSO failures, Conditional Access, MFA, application integration, identity synchronization, and hybrid authentication; experience with SAML, OpenID Connect, OAuth, and other modern authentication protocols is highly desired. * Ability to lead and execute iterative migration of on-premises Active Directory environments to Microsoft Entra ID, including hybrid identity configurations, Microsoft Entra Connect/Cloud Sync, and cloud-only identity models. * Demonstrated proficiency in DevSecOps practices by designing and implementing API-driven automation for the complete user lifecycle, from onboarding through offboarding. * Demonstrated experience with assessing and documenting existing Active Directory and Entra ID dependencies, including users, groups, service accounts, GPOs, applications, authentication methods, and identity lifecycle processes, and developing migration and modernization strategies. * Demonstrated experience with designing, implementing, and supporting Microsoft Entra ID architecture, including tenant configuration, domain integration, identity lifecycle management, Enterprise Applications, SSO, Conditional Access, MFA, application registration, and integration between on-premises Active Directory, Microsoft Entra ID and Microsoft Defender. * Familiarity with Jira, Confluence, and ServiceNow tools for collaboration and managing identity engineering work, incidents, and technical projects. * Familiarity with cloud computing (e.g., AWS, Azure, GCP), with hands-on experience supporting Microsoft Azure and Microsoft Entra ID environments preferred. * Participate in a rotational on-call schedule approximately once per month to provide support and respond to urgent identity and authentication issues as needed., * Regular and reliable job attendance * Effective verbal and written communication skills * Exhibit respect and understanding of others to maintain professional relationships * Independent judgement in evaluation options to make sound decisions * Home office environment with the ability to work effectively surrounded by moderate home environment noise - (Telework) ## Description The Engineer II works with cross-functional teams and customers to understand business requirements and translates into technical specifications. They discover the true requirements underlying feature requests and recommend alternative technical approaches. The Engineer II partners with cross-functional technical teams to launch projects and provide ongoing technical support. They collaborate with management to identify opportunities to streamline technology processes and develop new procedures that support the business unit/department. Responsibilities * Establishes a technical roadmap for the platform and/or capability strategy and lifecycle that considers value-based outcomes, costs to maintain, supportability, and performance. * Ensures sound integration, data, security, and business architecture design throughout all stages within the platform and/or capability lifecycle. * Provides rapid delivery and development of technical solutions that align with business and/or platform desired outcomes. * Troubleshoots and resolves technical issues related to platform or capability systems, solutions, and services. * Innovates and drives continuous improvements of implementation methodology and technical service offerings based on customer/employee experiences or other enterprise objectives/outcomes. * Participates in a Community of Interest for engineers across all capability and platform teams to share information and strengthen understanding of business needs and technology-based business solutions. * Develops and maintains deep technical knowledge and expertise related to domain area systems, solutions, services, and applications. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)