Azure AD L3 Engineer

Education Qualification: Bachelor's degree in Computer Science or related field or higher with minimum 4 years of relevant experience.
Role SummaryThe candidate should be responsible for advanced support and implementation of IAM solutions. This role involves handling complex escalations, optimizing IAM processes, and driving improvements in IAM and security. The L3 engineer also mentors junior staff and collaborates with architects on strategic IAM initiatives.Key ResponsibilitiesProvide expert-level support for IAM platforms, resolving complex incidents and problems.Perform advanced troubleshooting for authentication, SSO, MFA, RADIUS, GPO, AD Replication, AD Connect Sync, LAPS and DNS.Lead integration of new applications with IAM (SSO, federation, MFA, SCIM provisioning).Implement advanced Conditional Access policies and Zero Trust controls.Perform root cause analysis for recurring IAM issues and implement permanent fixes.Conduct access governance reviews, remediation, and compliance reporting.Collaborate with IAM Architects on solution design, migrations, and modernization projects.Assessment of current and Deployment of Domain Controllers to stay updated with technology.Review and updating Production guide.Mentor and guide IAM L1/L2 engineers in troubleshooting and best practices.Skills & Competencies5+ years of IAM experience with at least 2 years in advanced engineering role.Strong expertise in Microsoft Entra ID (Azure AD), Active Directory, Federation (ADFS, Entra Federation).Strong expertise in DNS, Group Policy Management, RADIUS (NPS), Certificate Authority (PKI)Deep understanding of Modern authentication protocols (SAML, OAuth2.0, OpenID Connect, WS-Fed).Hands-on experience with MFA, Conditional Access, CAE, Identity security.Proficiency with PowerShell scripting and Microsoft Graph API for automation.Knowledge of cloud IAM for Azure, AWS, and SaaS integrations.Strong analytical, problem-solving, and incident management skills.Exposure to SailPoint, Okta, or other IGA platforms is a plus.Scripting experience (PowerShell, MS Graph, KQL)CertificationMicrosoft certifications highly desirable (SC-300, SC-100, AZ-500, MS-100).Skills: