Microsoft Entra Architect

Job Overview:

Microsoft Entra ID (Azure AD) Design & Implementation Specialist

Key Responsibilities:

• Architect and deploy

  Microsoft Entra ID

  solutions for hybrid and cloud-native environments
• Design

  SSO integrations

  for third-party and enterprise applications using

  SAML, OAuth2, and OpenID Connect

• Implement

  Multi-Factor Authentication (MFA)

  and configure

  authentication methods

  like

  FIDO2, Passkeys, and CBA

• Develop and manage

  Conditional Access policies

  using dynamic signals and risk-based access controls
• Modernize authentication by migrating apps from

  ADFS to Entra ID

  , ensuring claim transformations and trust configurations
• Configure and manage

  Entra ID synchronization

  using

  Connect or Cloud Sync

  , including OU filtering and writeback
• Build and maintain

  PKI infrastructure

  with smart card logon, auto-enrollment, and certificate lifecycle management
• Implement

  Identity Governance

  capabilities including

  Access Reviews, PIM

  , and

  Entitlement Management

• Automate identity tasks using

  Microsoft Graph API

  and

  PowerShell scripting

• Enhance security posture through

  Zero Trust design

  , secure score analysis, and tools like

  Ping Castle and Blood Hound

• Create detailed

  design documents

  , implementation runbooks, and best practice guidelines

Required Skills:

• Hands-on expertise in

  Microsoft Entra ID design and configuration

• Proficiency in

  modern authentication protocols

  and

  SSO integration

• Strong grasp of

  MFA enforcement

  and

  Authentication Strengths configuration

• Experience with

  identity modernization

  from legacy systems (e.g., ADFS)
• Knowledge of

  hybrid identity sync architecture

  and deployment strategies
• Practical understanding of

  PKI components

  and digital certificate management
• Exposure to

  identity lifecycle automation

  and custom scripting
• Familiarity with

  Zero Trust principles

  and

  cloud security controls

• Experience in

  governance and access management

  on a scale

Technical Skills:

• Microsoft Entra ID (Azure AD)
• SAML, OAuth2, OpenID Connect
• MFA, CBA, FIDO2, Passkeys
• ADFS Migration
• Microsoft Entra Connect / Cloud Sync
• PowerShell, Microsoft Graph API
• PKI / SSL / Certificate Templates
• Access Reviews, PIM, Entitlement Management

Certifications

Mandatory:

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Good to Have:

• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)