Senior Entra ID Integration Engineer

VIATEQ Corporation•Washington, DC

1d•$130,000 - $160,000•Hybrid

About The Position

VIATEQ Corporation is seeking a Senior Entra ID Integration Engineer to support enterprise identity and access management operations and IT administrative and operational services for a federal government client. The role serves as the program’s primary Microsoft Entra ID subject matter expert and technical authority, responsible for architecture, engineering, implementation, administration, and continuous improvement of identity capabilities across on-premises, cloud, hybrid, and enterprise application environments. The position works with security, network, cloud operations, Zero Trust, DevSecOps, application development, and Government teams to deliver secure, resilient, compliant identity services aligned with Federal cybersecurity frameworks and Zero Trust objectives. The engineer leads enterprise Entra ID architecture and operations, including tenant administration, authentication, Conditional Access, Privileged Identity Management, Identity Protection, Entra ID Governance, hybrid identity, application single sign-on and provisioning, security telemetry integration, change management, compliance, and continuous monitoring. The role also provides technical guidance and mentorship to junior and mid-level engineers and maintains architecture, operational, security, and compliance documentation. Primary work is performed at the client site in Washington, DC, and approved remote/telework locations. An active security clearance, or the ability to obtain and maintain a government background investigation and required IT access authorizations, is required before performing work; specific clearance requirements will be confirmed at offer. Compensation is listed as $130,000–$160,000, based on experience, location, and other factors.

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, information systems, or a related field from an accredited college or university; an equivalent combination of education and directly relevant experience may be considered.
At least 7 years of hands-on experience in identity and access management engineering, cloud security, or a closely related discipline.
At least 4 years of hands-on experience engineering and administering Microsoft Entra ID (Azure Active Directory) in an enterprise environment.
Hands-on experience designing and implementing enterprise Conditional Access frameworks, including risk-based policies, device compliance integration, and phishing-resistant MFA enforcement.
Experience configuring Entra ID PIM, including just-in-time access provisioning, approval workflows, and access review campaigns.
Experience with hybrid identity infrastructure, including Entra Connect or Entra Cloud Sync configuration, synchronization management, and troubleshooting.
Experience supporting IAM activities in a Federal government IT contracting environment, including familiarity with applicable Federal cybersecurity compliance frameworks.
Active security clearance or ability to obtain and maintain a government background investigation and required IT access authorizations.
Deep hands-on proficiency across Entra ID tenant administration, Conditional Access, PIM, Identity Protection, hybrid identity synchronization, and enterprise application SSO integration.
Ability to design and maintain enterprise Zero Trust identity architectures incorporating Continuous Access Evaluation, risk-based access controls, phishing-resistant MFA, and least-privilege governance.
Advanced Conditional Access skills, including risk-based policies, device compliance, named locations, session controls, and Continuous Access Evaluation.
PIM engineering experience, including role assignment policies, just-in-time provisioning, approval workflows, and access review campaigns.
Strong knowledge of enterprise identity protocols and standards; the posting specifically names SAML 2.0, but the supplied text ends before listing any additional protocols.

Nice To Haves

Prior experience as a senior Entra ID or Azure AD engineer or architect on a Federal IT program of comparable scale and complexity.
Hands-on experience with Entra ID Governance entitlement management, lifecycle workflows, and access review campaign administration.
Experience supporting FedRAMP authorization activities and implementing Entra ID identity security controls in Microsoft Azure Government environments.

Responsibilities

Serve as the program’s technical authority and subject matter expert for Microsoft Entra ID, providing architectural guidance, engineering leadership, and technical recommendations.
Design and lead enterprise Entra ID architecture, including tenant architecture, hybrid identity, Conditional Access, PIM, Identity Protection, Governance, and Zero Trust identity capabilities.
Develop and maintain identity architecture diagrams, authentication flows, policy frameworks, hybrid topology diagrams, platform baselines, and other technical documentation.
Review identity architecture for new systems, applications, cloud migrations, and infrastructure changes; assess risks and recommend improvements.
Evaluate Entra ID capabilities, identity security developments, and Federal policy requirements, and advise stakeholders on opportunities to advance identity security and Zero Trust maturity.
Mentor junior and mid-level engineers and promote identity engineering best practices.
Engineer, implement, administer, secure, and maintain the enterprise Entra ID tenant in accordance with Federal security requirements and applicable DISA STIGs and CIS Benchmarks.
Maintain tenant settings, authentication methods, password policies, self-service password reset, security defaults, domains, branding, directory objects, groups, administrative units, and service principals.
Deploy and manage phishing-resistant multifactor authentication, including FIDO2 security keys, Windows Hello for Business, and certificate-based authentication.
Monitor tenant health, service availability, operational metrics, configuration issues, service disruptions, and security anomalies.
Design, implement, document, and optimize Conditional Access policies, including named locations, device compliance, risk-based access, session controls, application-specific access, and Continuous Access Evaluation.
Manage Conditional Access policy lifecycle, exclusions, reviews, impact assessments, and documentation.
Engineer and administer PIM for Entra ID roles, Azure resource roles, and enterprise applications, including just-in-time access, eligibility, approvals, activation limits, justifications, access reviews, alerts, and operating documentation.
Configure and operate Identity Protection risk policies, automated remediation, investigation workflows, SIEM integration, and detection-effectiveness monitoring.
Implement Entra ID Governance, including entitlement management, access packages, approval workflows, access reviews, lifecycle workflows, terms of use, and governance reporting.
Engineer and maintain hybrid identity synchronization using Entra Connect or Entra Cloud Sync; manage synchronization mappings, authentication configurations, health monitoring, and troubleshooting.
Implement and maintain Entra ID seamless single sign-on and support AD FS configurations where applicable.
Integrate enterprise applications with Entra ID using SAML, OIDC, and OAuth 2.0 SSO and SCIM-based provisioning; govern app registrations, enterprise applications, OAuth grants, and API permissions.
Maintain an enterprise application SSO and provisioning catalog.
Integrate Entra ID sign-in, audit, risk, and PIM telemetry with the enterprise SIEM; develop detection content, support incident response, and conduct identity threat hunting.
Prepare Entra ID change requests for CAB review, including implementation plans, impact assessments, rollback procedures, and test plans; coordinate approvals and conduct post-implementation reviews.
Develop and maintain operational runbooks, standard operating procedures, and knowledge base articles.
Maintain compliance with applicable Federal cybersecurity requirements, including NIST SP 800-53, FISMA, FedRAMP, HSPD-12/FIPS 201, NIST SP 800-207, OMB M-22-09, DISA STIGs, and client policies.
Support ATO activities, including security control documentation, SSP contributions, continuous monitoring reports, and audit evidence collection.
Conduct configuration compliance assessments, remediate baseline deviations, support vulnerability management, and maintain compliance and audit documentation.