Senior Entra ID Engineer (IAM)

Job Overview

The Senior Entra ID / Azure Identity Engineer is responsible for designing, operating, and modernizing TE’s Microsoft Entra ID environment, supporting enterprise authentication, application access, and identity security initiatives.

This role sits at the intersection of identity operations and architecture, executing day‑to‑day Entra ID engineering while contributing to strategic initiatives such as ADFS decommissioning, MFA enforcement waves, Conditional Access stability, and application onboarding governance.

Key responsibilities

Application Authentication & SSO

• Support enterprise application onboarding and change requests leveraging Entra ID (SSO, OAuth/OIDC, SAML) through established IAM governance processes
• Execute and support ADFS to Entra ID application migrations, including validation, cutover support, and post‑migration
• Partner with InfoSec and Architecture to ensure secure SSO configurations and least‑privilege access patterns
• Engineering support for modern authentication rollout (passwordless)

Identity Security (MFA & Conditional Access)

• Implement and maintain Conditional Access policies, ensuring stability during MFA rollout waves and dependency changes
• Support MFA enforcement initiatives, including readiness checks, exception handling, and operational follow‑up
• Contribute to evaluations of Entra ID security capabilities as replacements for legacy tooling (e.g., password enforcement, monitoring)

Hybrid Identity & Synchronization

• Support directory synchronization and hybrid identity scenarios, including password hash sync and diversification discussions
• Collaborate on tenant and workload‑specific identity designs, especially for collaboration platforms and M365 workloads
• JML lifecycle for native cloud identities

Collaboration & Governance

• SME for Entra ID while collaborating in disciplines along the broad MS Ecosystem

• Actively participate in Microsoft Service Dependencies Workstream and Entra ID Round Table sessions, representing IAM Engineering
• Produce or contribute to technical follow‑ups, meeting notes, and decision documentation related to Entra ID changes

Work closely with IAM Architects, InfoSec, and Platform teams to align engineering execution with enterprise standards

Entra ID Engineering & Operations

• Operate and support TE’s Microsoft Entra ID tenant, including directory synchronization, authentication flows, and service health monitoring
• Investigate and remediate Entra ID alerts and sync failures, coordinating with IAM and application teams as needed
• Review Entra ID application access requests

Required background

• Hands‑on, deep experience administering Microsoft Entra ID in a large enterprise environment
• Practical experience with:
• SSO protocols (SAML, OAuth 2.0, OpenID Connect)
• Conditional Access and MFA
• Directory synchronization and hybrid identity
• Experience supporting application migrations or authentication modernization
• Ability to troubleshoot identity issues across applications, users, and directory services
• Strong collaboration skills in a matrixed IAM operating model

Preferred Qualifications

• Experience supporting ADFS decommissioning or legacy auth migrations would be considered a strong advantage
• Familiarity with IAM governance workflows (app approvals, sponsored accounts, API permission reviews)
• Experience participating in cross‑platform dependency or cloud migration workstreams
• Exposure to Entra ID security tooling and password policy enforcement strategies
• Experience implementing PAM strategy
• Familiarity with the Intune platforms

#jobsEMEAEG

Competencies