Entra ID L3 Professional

L3 Entra ID - Roles and Responsibilities

General Responsibilities

L3 support functions as the highest level of technical escalation and acts as a bridge between internal IT operations, developers, security teams, and vendors.

Technical Responsibilities

• Root Cause Analysis (RCA): Perform in-depth analysis of recurring issues and incidents to determine underlying problems.
• Custom Integrations: Support already integrated custom connectors for legacy and modern systems.
• API Troubleshooting: Support REST/SOAP-based integrations and API gateway configurations.
• Script Automation Development: Write scripts (e.g., PowerShell, Python, Bash) for automation, monitoring, or recovery.
• Advanced Log Analysis: Use tools like Splunk, ELK, Ping logs, Wireshark to identify identity/authentication issues, if available with the client.

Governance Security

• Audit and Compliance Support: Review audit trails, logging, and security configurations meet policy requirements.
• Security Baselines: Apply hardening guides for identity systems and support zero-trust architecture.
• Policy Configuration: Manage advanced policies for access control (RBAC, ABAC), MFA, and federation.

Operational Excellence

• Monitoring and Alerts: Fine-tune monitoring solutions (e.g., Dynatrace, SCOM, AppDynamics) to catch issues early.
• Change Management: Participate in CAB meetings and perform risk assessments. and adhere to standard Costco change management requirements by utilizing the proper processes for a RFC
• Documentation: Maintain detailed KBs, architectural diagrams, SOPs, and runbooks.
• Collaboration with Vendors: Escalate product related tickets to vendor support in consultation with the client (e.g., Ping, Microsoft, KeyFactor).
• Project Participation: Provide expert support in IAM projects, upgrades, and integrations.

Apart from the responsibilities listed above, this team will be able to assist with development / engineering related tasks based on available capacity and as prioritized by the Costco IAM team. The responsibilities listed above will be prioritized above any engineering tasks if prioritization is not provided by the Costco IAM team.

Product-Specific Responsibilities ( Microsoft Entra ID /Azure AD )

• Cloud-based identity provider for Microsoft services and third-party SSO.
• Configure Conditional Access policies with location, device, and risk filters.
• Support hybrid identity (Azure AD Connect, AD FS, Pass-through Auth).
• Integrate enterprise apps using SAML, OAuth, OpenID Connect.
• Manage guest/B2B user flows and external collaboration policies.
• Configure Identity Governance features like PIM, Access Reviews, and Entitlement Management.