Azure AD Expert with Entra ID

OPTIVEUM sp. z o.o. • Capon Bridge, WV

2d • PLN 170 • Hybrid

About The Position

Optiveum is recruiting and contracting a Senior Azure AD / Microsoft Entra ID Expert for a global client in the banking industry. The role supports the AD team in a cross-tenant initiative to integrate a separate partner tenant as a resource domain, allowing client accounts to securely access applications and resources without separate accounts. The initiative aims to simplify user management and the user experience while reducing Azure Virtual Desktop dependencies.

The position is full-time (40 hours per week) and hybrid, with three days per week in the office in Warsaw or the Tricity area (Gdańsk/Gdynia). The engagement is B2B, with a rate of up to 170 PLN per hour net. The cooperation agreement will be signed directly with Optiveum, the recruitment and contracting party.

Requirements

• Senior-level, hands-on experience with Microsoft Entra ID (Azure AD) in enterprise environments.
• Expert knowledge of cross-tenant access settings, including B2B collaboration, B2B direct connect, and trust settings for MFA and compliant devices.
• In-depth understanding of External Identities, guest accounts, and the cross-tenant synchronization lifecycle.
• Experience with Entra ID Governance, including entitlement management, access packages, and Privileged Identity Management (PIM) for external partners.
• Proven expertise in Azure RBAC, management groups, custom roles, and subscriptions in multi-tenant environments.
• Strong experience designing and managing Conditional Access policies.
• Experience aligning infrastructure across two separate enterprise environments while preventing permission overlaps.
• Understanding of endpoint management and cross-tenant device compliance validation.
• Strong experience with Azure Virtual Desktop deployments and session hosts.
• Fluent English.

Nice To Haves

• Stakeholder management skills across separate technical teams.
• Technical writing experience, including technical designs, migration plans, and runbooks.
• Experience in banking or other regulated industries.

Responsibilities

• Design and implement changes to tenants, subscriptions, and Conditional Access policies to enable cross-tenant access.
• Configure cross-tenant access settings, B2B collaboration, B2B direct connect, and trust settings for MFA and compliant device claims.
• Set up permissions for client accounts to access applications and other access-controlled resources in the partner tenant.
• Design management groups, custom RBAC roles, and subscription-level permissions while maintaining clear security boundaries.
• Support the safe reduction of Azure Virtual Desktop dependencies.
• Work with the partner's Azure consultant, the AD team, and the endpoint management team.
• Prepare technical designs, migration plans, and runbooks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed