Microsoft Entra ID (Azure AD) Security Engineer

TCS•Chicago, IL

About The Position

Design, implement, and manage Microsoft Entra ID (Azure AD) solutions for secure identity and access management. Ensure secure authentication and authorization aligned with industry best practices. Implement enterprise identity, authentication, authorization, MFA, SSO, and identity governance solutions. Support secure, scalable, and compliant Azure AD environments. Collaborate with security, DevOps, and application teams to strengthen identity security.

Requirements

Strong expertise in: Microsoft Entra ID (Azure Active Directory), Identity and Access Management (IAM), Authentication and Authorization
Hands-on experience with: Application onboarding, App registration, Enterprise applications, Role-Based Access Control (RBAC)
Strong experience implementing: Multi-Factor Authentication (MFA), Single Sign-On (SSO)
Expertise in configuring and troubleshooting authentication protocols: OAuth 2.0, OpenID Connect (OIDC), SAML
Experience configuring and managing: Conditional Access Policies, Device-based access controls, Location-based access controls
Strong understanding of Azure security services and best practices.
Hands-on experience with: Azure Sentinel, Security monitoring, Alert creation, Incident response automation
Experience with: Identity Governance, Privileged Identity Management (PIM), Elevated access management
Experience supporting production IAM environments and resolving security incidents.
Basic understanding of DevOps tools and application deployment processes.
Excellent verbal and written communication skills.
Strong analytical and troubleshooting abilities.
Effective stakeholder and cross-functional collaboration skills.
Ability to manage multiple priorities in a fast-paced environment.
Strong ownership, accountability, and customer-focused mindset.
Ability to mentor team members and share technical knowledge.
Proactive approach to continuous learning and security improvements.
Strong problem-solving and decision-making skills.

Responsibilities

Design, implement, and manage Microsoft Entra ID (Azure AD) solutions.
Configure secure authentication and authorization for enterprise applications.
Onboard applications through: App registration, Enterprise application setup, RBAC configuration
Implement and manage: Multi-Factor Authentication (MFA), Single Sign-On (SSO)
Configure and troubleshoot: OAuth 2.0, OpenID Connect (OIDC), SAML
Design and manage Conditional Access Policies based on: User identity, Device compliance, Geographic location, Risk conditions
Collaborate with cross-functional teams to resolve IAM-related issues.
Implement Azure security best practices across identity services.
Monitor security events using Azure Sentinel.
Create alerts and automation scripts for incident detection and response.
Provide production support and resolve identity and security incidents.
Implement and maintain Identity Governance and Privileged Identity Management (PIM).
Stay current with Microsoft Azure security updates, threats, and best practices.
Partner with DevOps and development teams to integrate secure identity solutions.