We are seeking a seasoned Identity SME with extensive experience to play a pivotal role in securing our customers' Microsoft Identity and related services, both on-premises and in the cloud. This role is crucial in safeguarding sensitive information and ensuring robust security measures are in place.
The ideal candidate will possess technical expertise across the following:
* Active Directory Domain Services (including ADCS (PKI), ADFS, DNS & DHCP)
* Microsoft Entra ID
* Microsoft Entra Connect/Cloud Sync
They will also provide technical expertise and guidance on Microsoft security best practices, offer in-depth knowledge of security principles, techniques, and protocols.
Core Responsibilities
* Design and implement identity solutions leveraging Microsoft Entra ID and Active Directory.
* Lead migrations from on-prem AD to cloud identity (Entra ID), including hybrid join strategies.
* Configure and maintain Conditional Access, MFA, and risk-based policies.
* Perform identity governance tasks: access reviews, entitlement management, and privileged identity management.
* Collaborate on security posture assessments and remediation plans for identity infrastructure.
Required Technical Skills
* Deep knowledge of Active Directory (including tiering, federation, and legacy protocol mitigation).
* Proficiency with Microsoft Entra ID (Azure AD), including Entra Connect, ID Protection, and Permissions Management.
* Experience with authentication protocols: OAuth2, OIDC, SAML2.
* Automation skills (PowerShell, Graph API) for identity lifecycle and migration tasks.
Preferred Experience
* Large-scale identity migration projects.
* Zero Trust architecture implementation.
* Governance and compliance frameworks for identity management.
* Familiarity with Microsoft Defender for Identity and integration with XDR solutions.