Microsoft Active Directory & Entra ID Engineer III

Avnet•Chandler, AZ

About The Position

We are seeking an experienced Microsoft Identity & Access Management professional with a minimum of 5 years' hands-on experience managing, supporting, and enhancing Microsoft Active Directory and Microsoft EntraID environments. The successful candidate will possess a strong understanding of hybrid identity architectures, including how on-premises Active Directory integrates and synchronizes with Microsoft EntraID. They will have proven experience implementing secure authentication solutions, Conditional Access policies, SAML-based application integrations, and modern identity management best practices. This role is critical in ensuring the security, reliability, and efficiency of our identity infrastructure and access management services.

Requirements

Minimum 5 years' experience administering Microsoft Active Directory.
Minimum 5 years' experience working with Microsoft Entra ID (Azure AD).
Strong understanding of hybrid identity architecture.
Proven experience with Azure AD Connect / Entra Connect.
Strong understanding of how Active Directory and Entra ID communicate and synchronise.
Experience implementing and managing Conditional Access policies.
Knowledge of authentication methods and identity protection controls.
Experience implementing and supporting Multi-Factor Authentication.
Strong understanding of Single Sign-On technologies.
Hands-on experience integrating and troubleshooting SAML applications.
Experience with DNS, LDAP, Kerberos, and Group Policy.
Strong troubleshooting and problem-solving skills.
Applicants for this position must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Nice To Haves

Experience with Microsoft Intune.
Experience with Privileged Identity Management (PIM).
Experience with Identity Governance.
PowerShell scripting and automation experience.
Experience with Microsoft Defender products.
Knowledge of OAuth 2.0 and OpenID Connect.
Experience in regulated or enterprise environments.
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Administrator Associate (AZ-104)
Microsoft Certified: Security Operations Analyst Associate (SC-200)
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
Microsoft Certified: Azure Fundamentals (AZ-900)

Responsibilities

Manage and support Microsoft Active Directory environments.
Administer users, groups, organizational units, and Group Policy Objects (GPOs).
Troubleshoot authentication, replication, DNS, and Active Directory-related issues.
Implement and maintain Active Directory security best practices.
Support AD upgrades, migrations, and disaster recovery processes.
Administer Microsoft EntraID (formerly Azure Active Directory).
Configure and manage users, groups, enterprise applications, and identities.
Support identity lifecycle management processes.
Configure and monitor authentication methods and identity protection capabilities.
Implement and maintain EntraID security controls.
Manage and troubleshoot Active Directory synchronization with EntraID.
Support Azure AD Connect / Entra Connect environments.
Design and implement Conditional Access policies.
Configure Multi-Factor Authentication (MFA).
Manage authentication methods and authentication strengths.
Support passwordless authentication technologies including: Microsoft Authenticator, FIDO2 Security Keys, Windows Hello for Business.
Configure and support SAML-based application integrations.
Manage Single Sign-On (SSO) solutions.
Troubleshoot identity federation and authentication issues.
Work with application owners and vendors to onboard enterprise applications.
Review identity security posture and recommend improvements.
Monitor and investigate authentication and access-related incidents.
Support audit and compliance requirements.
Implement least-privilege access principles and role-based access controls (RBAC).