Skills
Job Description
Entra ID engineer
Conditional Access/MFA/PIM configuration
Integration with Intune/EDR/SSO with Apps·
Roles & Responsibilities
Configure and tune Conditional Access policies in Entra ID (per persona, app, and risk level).
Enable and optimize Identity Protection (user risk, sign-in risk, token risk).
Build and support PIM roles, JIT workflows, approval chains, and access lifecycle processes.
Integrate device signals from Intune and EDR (Defender for Endpoint or equivalent) with EntraID.
Implement emergency break-glass and monitoring controls.
Support legacy-to-modern authentication migration for in-scope apps.
Advanced Troubleshooting (L3)
Diagnose complex authentication, MFA, token, device compliance, and CA evaluation issues.
Partner with application owners on SSO configuration (SAML/OIDC/OAuth).
Analyze identity logs, token flows, risky sign-ins, and CA failures
Salary Range: $100,000-$130,000 a year
