Azure AD Expert with Entra ID

OPTIVEUM sp. z o.o. • Capon Bridge, WV

2d • PLN 170 • Hybrid

About The Position

Optiveum is recruiting and contracting a Senior Azure AD Expert with Entra ID for a client in the banking industry. The client's AD team needs support implementing changes to tenants, subscriptions, and Conditional Access policies so NLP can operate as a resource domain within the client environment and grant client accounts access to NLP applications and other controlled resources. The goal is to reduce certain Azure Virtual Desktop requirements, simplify user management by removing the need for separate NLP accounts, and improve the user experience, with users primarily working from client-provided laptops.

The expert will work alongside the existing NLP Azure Consultant, providing design and implementation support for cross-tenant configurations, management groups, subscriptions, and Conditional Access policies. The role is full-time, 40 hours per week, and hybrid, with three days per week in the office. The preferred locations are Gdańsk or Gdynia, with Warsaw also available. The rate is up to 170 PLN per hour on a B2B basis.

Requirements

• Expert-level knowledge of Microsoft Entra ID cross-tenant access settings, including B2B collaboration, B2B direct connect, and trust settings for MFA and compliant device claims.
• In-depth understanding of external user management, guest accounts, and the cross-tenant synchronization lifecycle.
• Experience implementing Microsoft Entra ID Governance, entitlement management, access packages, and Privileged Identity Management (PIM) for external partners.
• Proven expertise designing Azure RBAC, management groups, custom RBAC roles, and subscription-level permissions in multi-tenant environments.
• Experience aligning IT infrastructure across two enterprise environments while maintaining security boundaries and preventing permission overlaps.
• Understanding of endpoint management and cross-tenant device compliance validation, including configuring tenant trust to recognize client-managed compliant devices.
• Strong experience with Azure Virtual Desktop deployments, session hosts, and the architectural considerations for reducing or eliminating AVD dependencies.
• Fluent English.

Nice To Haves

• Ability to bridge communication gaps among separate technical teams, including AD, NLP, and endpoint management teams.
• Ability to draft technical designs, migration plans, and final runbooks.

Responsibilities

• Design and implement cross-tenant configurations, management groups, subscriptions, and Conditional Access policies.
• Support changes that enable NLP to grant client accounts access to NLP applications and other access-controlled resources.
• Help align infrastructure across the client and NLP environments while maintaining security boundaries and avoiding permission overlaps.
• Support identity governance and lifecycle management for external partners.
• Assess architectural considerations for safely reducing or eliminating Azure Virtual Desktop dependencies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed