Monitor identity platforms for suspicious activity, risky access, privilege misuse, and configuration weaknesses; partner with Security Operations to investigate and remediate identity-related incidents.
Integrate identity events and risk signals with Microsoft Sentinel, Microsoft Defender, and related monitoring platforms, and support audits, assessments, compliance, and risk remediation.
Automate provisioning, reviews, reporting, and remediation using PowerShell, Microsoft Graph, APIs, and related technologies.
Maintain reliable identity platforms, troubleshoot complex access issues, document standards and procedures, evaluate emerging practices, and communicate risks and recommendations to stakeholders.
Required Qualifications
Bachelor’s degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent education and experience.
5+ years of progressive experience in identity and access management, security engineering, infrastructure security, systems integration, or a related technical discipline.
Hands-on experience with Microsoft Entra ID, Active Directory, identity synchronization, hybrid identity, multi-factor authentication, Conditional Access, Single Sign-On, federation, role-based access, and identity lifecycle processes.
Working knowledge of SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate-based authentication, Zero Trust, privileged access, and access governance.
Experience with PowerShell, Microsoft Graph, APIs, or comparable scripting and automation technologies.
Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills.
Preferred Qualifications
Advanced experience with Microsoft Entra ID Protection and Governance, Conditional Access, Privileged Identity Management, entitlement management, or passwordless authentication.
Experience with privileged access or identity governance platforms such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, or comparable technologies.
Experience securing Microsoft 365, Azure, SaaS and enterprise applications, integrating HR systems with identity processes, and supporting security monitoring, audits, or regulatory requirements.
Relevant Microsoft, identity, or security certification, such as Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP, or Security+.