> Markdown version of [/jobs/ext/3967232-microsoft-entra-id-engineer](https://www.wearedevelopers.com/jobs/ext/3967232-microsoft-entra-id-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Microsoft Entra ID Engineer

- **Company:** OpenKyber LLC
- **Location:** Atlanta, GA, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Data Analysis, Authentication Protocols, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Networking Hardware, Intrusion Detection and Prevention, Linux Security Modules, Microsoft Security Essentials, Microsoft Office, Performance Tuning, Azure Active Directory, Anti-Phishing, Kusto Query Language, Security Information and Event Management, Systems Integration, TCP/IP, EndPointSecurity, Mitre Att&ck, Malware, Firewalls (Computer Science), Cybercrime, Microsoft Sentinel
- **Published:** October 27, 2026
- **Apply:** https://www.careerjet.com/jobad/us0e44b37d952339ca19b87d06009636c0

## About the Role

* Strong hands-on experience with Microsoft Sentinel for SIEM monitoring, security analytics, incident investigation, and threat detection.
 * Experience working as an L3 SOC Analyst/Specialist, handling complex security incidents, escalations, root-cause analysis, and advanced threat investigations.
 * Expertise in Microsoft Defender XDR, including Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud.
 * Strong knowledge of KQL (Kusto Query Language) for developing advanced queries, detection rules, hunting queries, workbooks, and analytics rules.
 * Experience designing, tuning, and maintaining Sentinel Analytics Rules, Workbooks, Automation Rules, Playbooks, Watchlists, and Data Connectors.
 * Strong understanding of MITRE ATT&CK, threat hunting, IOC/IOA analysis, malware analysis, and security event correlation.
 * Experience investigating phishing, ransomware, malware, credential compromise, insider threats, lateral movement, privilege escalation, and data exfiltration.
 * Hands-on experience with SOAR automation using Microsoft Sentinel Playbooks and Azure Logic Apps.
 * Ability to perform advanced threat hunting, identify anomalous behavior, correlate events across multiple data sources, and develop new detection use cases.
 * Experience integrating Sentinel with Azure, Active Directory/Entra ID, Microsoft 365, firewalls, EDR/XDR, network devices, and third-party security tools.
 * Strong understanding of TCP/IP, DNS, HTTP/S, authentication protocols, Windows/Linux security, Active Directory, and cloud security concepts.
 * Experience with incident response processes, SOC procedures, SIEM use-case development, alert tuning, false-positive reduction, and security monitoring.
 * Ability to create detailed incident reports, investigation documentation, executive summaries, and technical recommendations.
 * Strong communication and troubleshooting skills with the ability to mentor L1/L2 SOC analysts and coordinate with incident response, infrastructure, cloud, and application teams.
 * Microsoft Sentinel / SC-200 certification or relevant Microsoft security certifications are preferred.
 * Must be willing to work onsite in the New Jersey area.