Senior Authentication Services Engineer

What you'll do

• Engineer, configure, and maintain Microsoft Entra ID, Active Directory, and federated identity services.
• Implement and support SSO integrations using SAML, OIDC, and OAuth 2.0 across hybrid application portfolios.
• Configure MFA policies and roll out phishing-resistant credentials like FIDO2 and Windows Hello for Business.
• Develop, test, and maintain Conditional Access policies aligned with enterprise security requirements.
• Create and maintain technical documentation including runbooks, configuration records, and architecture diagrams.
• Provide technical evidence and remediation support for audit and compliance activities.
• Troubleshoot complex authentication issues as a technical escalation resource and participate in an on-call rotation.
• Monitor platform health and respond to security incidents within the authentication domain.

What we're looking for

• Must have a High School Diploma and 8 years of experience in IT, Computer Science, IAM Engineering, or Information Security.
• Must have a Bachelor's degree or higher and experience in IT, Computer Science, IAM Engineering, or Information Security.
• Experience with Microsoft Entra ID, including Conditional Access, PIM, and hybrid identity (preferred).
• Knowledge of Active Directory domain architecture, Group Policy, trusts, Kerberos, NTLM, and security hardening (preferred).
• Proficiency with federation protocols including SAML 2.0, OIDC, and OAuth 2.0 (preferred).
• Experience with PowerShell scripting and Microsoft Graph API for identity operations (preferred).
• SC-300, AZ-500, or equivalent Microsoft identity certifications (preferred).