Cyber Security Identity Engineer

· Design, implement, and support Microsoft Entra ID, Active Directory, hybrid identity, directory synchronization, and related enterprise identity services.

· Engineer authentication and access controls, including multi-factor and passwordless authentication, Single Sign-On, federation, Conditional Access, and secure application integrations.

· Develop secure identity patterns for users, administrators, service accounts, application identities, and external partners while advancing Zero Trust and reducing legacy authentication.

· Strengthen identity lifecycle and governance processes, including provisioning, transfers, deprovisioning, role-based access, entitlement management, access reviews, and separation-of-duties controls.

· Engineer privileged access controls using just-in-time activation, approval workflows, time-bound access, strong authentication, and standards for administrative, emergency, and service accounts.

· Monitor identity platforms for suspicious activity, risky access, privilege misuse, and configuration weaknesses; partner with Security Operations to investigate and remediate identity-related incidents.

· Integrate identity events and risk signals with Microsoft Sentinel, Microsoft Defender, and related monitoring platforms, and support audits, assessments, compliance, and risk remediation.

· Automate provisioning, reviews, reporting, and remediation using PowerShell, Microsoft Graph, APIs, and related technologies.

· Maintain reliable identity platforms, troubleshoot complex access issues, document standards and procedures, evaluate emerging practices, and communicate risks and recommendations to stakeholders.

· Bachelor’s degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent education and experience.

· 5+ years of progressive experience in identity and access management, security engineering, infrastructure security, systems integration, or a related technical discipline.

· Hands-on experience with Microsoft Entra ID, Active Directory, identity synchronization, hybrid identity, multi-factor authentication, Conditional Access, Single Sign-On, federation, role-based access, and identity lifecycle processes.

· Working knowledge of SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate-based authentication, Zero Trust, privileged access, and access governance.

· Experience with PowerShell, Microsoft Graph, APIs, or comparable scripting and automation technologies.

· Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills., · Advanced experience with Microsoft Entra ID Protection and Governance, Conditional Access, Privileged Identity Management, entitlement management, or passwordless authentication.

· Experience with privileged access or identity governance platforms such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, or comparable technologies.

· Experience securing Microsoft 365, Azure, SaaS and enterprise applications, integrating HR systems with identity processes, and supporting security monitoring, audits, or regulatory requirements.

· Relevant Microsoft, identity, or security certification, such as Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP, or Security+.