Microsoft Active Directory & Entra ID Engineer III

Avnet•Chandler, AZ

About The Position

Avnet is seeking an experienced Microsoft Identity & Access Management professional to manage, support, and enhance its Microsoft Active Directory and Microsoft Entra ID environments. The role requires a strong understanding of hybrid identity architectures, including synchronization between on-premises Active Directory and Entra ID, and experience implementing secure authentication solutions, Conditional Access policies, SAML application integrations, and modern identity management practices. This position is important to the security, reliability, and efficiency of the organization’s identity infrastructure and access management services. The engineer administers Active Directory and Entra ID, supports identity lifecycle management, and maintains hybrid synchronization and authentication capabilities. The role also designs and implements Conditional Access and MFA, supports passwordless authentication, integrates enterprise applications, and helps monitor identity security, investigate incidents, and meet audit and compliance requirements. The position requires a bachelor’s degree or equivalent experience and typically five or more years of relevant experience. One or more listed Microsoft certifications are advantageous. The position will have access to ITAR product and requires the employee to meet the stated U.S. citizenship, nationality, lawful permanent resident, or protected-individual eligibility criteria. Applicants must be authorized to work for any U.S. employer; Avnet cannot sponsor or take over sponsorship of an employment visa for this position.

Requirements

Typically 5 or more years of experience with a bachelor’s degree or equivalent.
Bachelor’s degree or equivalent experience providing comparable knowledge and job skills.
Five years of experience administering Microsoft Active Directory.
Five years of experience working with Microsoft Entra ID (Azure AD).
Strong understanding of hybrid identity architecture and how Active Directory and Entra ID communicate and synchronize.
Proven experience with Azure AD Connect / Entra Connect.
Experience implementing and managing Conditional Access policies.
Knowledge of authentication methods and identity protection controls.
Experience implementing and supporting Multi-Factor Authentication.
Strong understanding of Single Sign-On technologies.
Hands-on experience integrating and troubleshooting SAML applications.
Experience with DNS, LDAP, Kerberos, and Group Policy.
Strong troubleshooting and problem-solving skills.
Must be authorized to work for any employer in the United States; visa sponsorship or takeover of sponsorship is not available.
Must meet the stated eligibility requirements for access to ITAR product: U.S. citizen or national, lawful permanent resident as defined by 8 U.S.C. 1101(a)(20), or protected individual as defined by 8 U.S.C. 1324b(a)(3).

Nice To Haves

Experience with Microsoft Intune.
Experience with Privileged Identity Management (PIM).
Experience with Identity Governance.
PowerShell scripting and automation experience.
Experience with Microsoft Defender products.
Knowledge of OAuth 2.0 and OpenID Connect.
Experience in regulated or enterprise environments.
One or more of the following certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300); Microsoft Certified: Azure Administrator Associate (AZ-104); Microsoft Certified: Security Operations Analyst Associate (SC-200); Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900); Microsoft Certified: Azure Fundamentals (AZ-900).

Responsibilities

Manage and support Microsoft Active Directory environments.
Administer users, groups, organizational units, and Group Policy Objects (GPOs).
Troubleshoot authentication, replication, DNS, and other Active Directory issues.
Implement and maintain Active Directory security best practices.
Support Active Directory upgrades, migrations, and disaster recovery processes.
Administer Active Directory Sites and Services.
Administer Microsoft Entra ID, including users, groups, enterprise applications, and identities.
Support identity lifecycle management processes.
Configure and monitor authentication methods and identity protection capabilities.
Implement and maintain Entra ID security controls.
Manage and troubleshoot Active Directory synchronization with Entra ID, including Azure AD Connect / Entra Connect environments.
Support Password Hash Synchronization, Pass-through Authentication, federation, and Single Sign-On.
Design and implement Conditional Access policies and configure Multi-Factor Authentication.
Manage authentication methods and authentication strengths.
Support passwordless authentication technologies, including Microsoft Authenticator, FIDO2 Security Keys, and Windows Hello for Business.
Configure and support SAML-based application integrations and manage SSO solutions.
Troubleshoot identity federation and authentication issues.
Work with application owners and vendors to onboard enterprise applications.
Review identity security posture and recommend improvements.
Monitor and investigate authentication- and access-related incidents.
Support audit and compliance requirements.
Implement least-privilege access principles and role-based access controls (RBAC).

Benefits

Generous paid time off.
401(k) and pension plan.
Paid holidays.
Family support, including paid leave, surrogacy, and adoption.
Medical, dental, vision, and life insurance.
Long-term and short-term disability insurance.
Health Savings Account / Flexible Spending Account.
Education assistance.
Employee development resources.
Employee wellness, leadership development, and mentorship programs.
Flexible working arrangements.
Programs supporting employee well-being and opportunities to give back to the community.