> Markdown version of [/jobs/ext/3892133-entra-id-engineer-consultant-access-management-identity-governance](https://www.wearedevelopers.com/jobs/ext/3892133-entra-id-engineer-consultant-access-management-identity-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Entra ID Engineer Consultant - Access Management & Identity Governance - **Company:** Greenhouse Software, Inc. - **Location:** Seattle, WA, United States - **Experience:** Expert - **Salary:** $135,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), User Authentication, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Azure Active Directory, Anti-Phishing, Security Assertion Markup Language (SAML), Systems Architecture, Bicep, SailPoint, Terraform - **Published:** October 23, 2026 - **Apply:** https://job-boards.greenhouse.io/kallesgroup/jobs/8909780002 ## About the Role * Bachelor's/master's in CS, Cybersecurity, IT, or equivalent experience. * 4+ years in IAM or security engineering with a track record leading technical projects. * Deep hands-on Microsoft Entra ID: Conditional Access, authentication methods, PIM, Entra ID Protection. * Hands-on Entra ID Governance: entitlement management (access packages), access reviews, lifecycle workflows. * Expert knowledge of SAML, OAuth 2.0, OIDC, SCIM and their security implications. * Hybrid identity: Entra Connect / Cloud Sync with on-prem AD; governing access across both. * Automating Entra via Microsoft Graph API / Graph PowerShell SDK; PowerShell, Python; Terraform or Bicep. * System-level design thinking; able to set standards others build against. * Clear communication with engineers and stakeholders; operates autonomously in a fast-paced environment., * Certifications: SC-300, SC-100, AZ-500, CISSP, or SailPoint. * Entra governance alongside an enterprise IGA (SailPoint IdentityNow / ISC). * PAM familiarity (e.g., BeyondTrust) and how PAM and PIM complement each other. ## Description As a Senior Microsoft Entra ID Engineer, you'll be on assignment with one of our enterprise clients, helping lead a large workforce identity migration. Authentication for thousands of applications, including many complex SAML integrations, is moving from a legacy identity provider to Microsoft Entra ID. You'll own the design, build and operation of access management and identity governance in Entra, and you'll have a lot of autonomy. Your work will include Conditional Access and authentication strategy (phishing-resistant MFA and passwordless), Privileged Identity Management, application SSO and provisioning, B2B access, and the full Entra ID Governance suite: entitlement management, access reviews and lifecycle workflows. You'll make Entra-native governance work cleanly alongside SailPoint Identity Security Cloud and hybrid Active Directory, and you'll automate with Microsoft Graph, PowerShell and Infrastructure as Code. You'll also set engineering standards and mentor other engineers on the team., ACCESS MANAGEMENT (Entra ID) * Design and maintain Conditional Access architecture - persona/risk-based policies, device & location conditions, session controls, Authentication Strengths for phishing-resistant MFA. * Own authentication methods strategy and rollout - passwordless/FIDO2/passkeys, Windows Hello for Business, certificate-based auth; retire weaker methods. * Administer Privileged Identity Management (PIM) - eligible assignments, JIT activation, approvals, privileged role & PIM-for-groups reviews. * Manage application access - enterprise app SSO (SAML/OIDC), app role assignments, SCIM provisioning. * Design external identity / B2B controls - cross-tenant access settings, guest governance, partner access patterns. IDENTITY GOVERNANCE (Entra ID Governance) * Build and operate Entitlement Management - access packages, catalogs, policies, approval/expiration workflows, separation-of-duties checks. * Design and run Access Reviews across groups, apps, privileged roles and guests, including recurring/automated reviews with auto-remediation. * Implement Lifecycle Workflows - HR-driven joiner/mover/leaver and scheduled governance tasks. * Configure HR-driven inbound provisioning and outbound SCIM app provisioning. * Integrate Entra-native governance with SailPoint ISC and hybrid AD, defining ownership boundaries and avoiding duplicate controls. ACROSS THE ROLE * Automation and config-as-code (PowerShell, Microsoft Graph API / Graph PowerShell SDK, Terraform/Bicep). * Produce reference designs, standards and documentation; review other engineers' designs/configs. * Partner with SecOps so identity telemetry supports threat detection. * Mentor engineers; act as Entra access/governance SME. Use AI tooling to accelerate design and documentation., + Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly. + Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth. + Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.