Senior Authentication Services Engineer

What you'll do

• Configure and maintain Microsoft Entra ID, Active Directory, and federated identity services across the enterprise.
• Implement and support SSO integrations using SAML, OIDC, and OAuth 2.0 for SaaS and on-prem applications.
• Manage MFA policies and deploy phishing-resistant credentials such as FIDO2 and Windows Hello for Business.
• Develop and maintain Conditional Access policies aligned with Zero Trust security requirements.
• Create technical documentation including runbooks, configuration records, and architecture diagrams.
• Provide technical evidence and remediation support for audit and compliance activities.
• Monitor platform health and serve as a technical escalation resource for complex authentication issues.

What we're looking for

• A High School Diploma and 8 years of experience in IT, Computer Science, IAM Engineering, or Information Security are required.
• A Bachelor's degree and experience in IT, Computer Science, IAM Engineering, or Information Security are accepted as an alternative.
• Experience with Microsoft Entra ID including Conditional Access, PIM, and hybrid identity is required.
• Solid working knowledge of Active Directory architecture, Group Policy, Kerberos, NTLM, and security hardening is required.
• Proficiency with federation protocols such as SAML 2.0, OIDC, and OAuth 2.0 is required.
• Experience implementing enterprise MFA solutions including phishing-resistant methods like FIDO2 and Windows Hello for Business is preferred.
• Knowledge of PowerShell scripting and Microsoft Graph API for identity operations is preferred.