Responsibilities
Oversee the administration and maintenance of Microsoft Entra ID identity services to ensure seamless operational functionality. Provide ongoing support and troubleshooting to address any issues that may arise, ensuring optimal performance and security of the identity infrastructure.
Administer users, groups, dynamic groups, administrative units, roles, and directory objects to ensure seamless identity and access management.
Support a variety of authentication methods, such as multifactor authentication (MFA), passwordless authentication, and modern authentication protocols.
Design, implement, and oversee Conditional Access policies to enforce organizational security standards and ensure compliance with access control requirements.
Facilitate the safeguarding of identities, identification of high-risk users and sign-ins, and execution of corresponding remediation measures.
Oversee the upkeep of identity platform documentation, operational workflows, and diagnostic manuals.
Support enterprise application integrations by leveraging SAML, OAuth 2.0, OIDC, and SCIM protocols.
Configure and resolve issues related to Single Sign-On integrations.
Oversee the creation, configuration, and maintenance of app registrations, service principals, redirect URIs, API permissions, certificates, and secrets.
Investigate and resolve authentication and authorization challenges, including failed login attempts, token malfunctions, consent discrepancies, redirect loops, and claims mapping discrepancies.
Collaborate with application teams to establish secure identity integration methodologies.
Facilitate the administration of identity processes for joiners, movers, leavers, contractors, guests, and administrative staff.
Design, implement, and oversee lifecycle workflows and provisioning processes to ensure seamless and efficient operational execution.
Facilitate automated user and group provisioning by utilizing Microsoft Graph, SCIM, and identity governance solutions to ensure efficient and secure identity management.
Review and update user profiles, group memberships, guest accounts, application assignments, and unassigned permissions to ensure current and accurate access management.
Facilitate the establishment of consistent identity lifecycle management protocols across diverse platforms and organizational divisions.
Facilitate access reviews, govern entitlement management processes, administer access packages, and oversee approval workflows to ensure security and compliance.
Support the administration and oversight of privileged access management through the utilization of Microsoft Entra Privileged Identity Management (PIM).
Track and document privileged roles, ongoing access, outdated assignments, and any deviations from established access protocols.
Generate reports that detail user, group, application, and role-based access permissions across the system.
Collect and compile evidence to support audit and compliance activities.
Develop and sustain PowerShell scripts leveraging Microsoft Graph capabilities.
Automate recurring tasks associated with identity operations, reporting, validation, and remediation processes.
Facilitate automation initiatives through the utilization of Azure Automation, Azure Functions, Logic Apps, or workflows structured within pipelines.
Develop standardized scripts for automated provisioning, cleanup operations, reporting procedures, access validation processes, and routine operational checks.
Maintain automation code with meticulous organization and comprehensive documentation to ensure clarity and efficiency throughout development and maintenance cycles.
Facilitate seamless identity management for devices configured with Entry join, hybrid join, or device registration approaches.
Work closely with endpoint management teams to integrate device compliance signals into Conditional Access policies.
Investigate and resolve access-related challenges pertaining to device identity, compliance status, and authentication criteria.
Establish and maintain device-based access controls in strict accordance with established identity and security policies to safeguard organizational resources.
We are seeking a highly motivated individual to join our team, possessing the necessary qualifications and expertise to excel in this role. Candidates should hold a relevant degree or equivalent professional experience in the field, demonstrating a strong foundation of knowledge and competencies. Essential requirements include proficiency in key industry tools and methodologies, as well as the ability to analyze complex data and derive actionable insights. The ideal applicant will exhibit exceptional problem-solving skills, adaptability, and a commitment to continuous learning. Additionally, effective communication and collaboration abilities are crucial for success in this position.
Professional experience of a minimum of three years with Microsoft Entra ID is required.
A Bachelor’s degree in a technical field is a mandatory qualification for this position.
A master’s degree is preferred.
Proficiency in Microsoft Entra ID, formerly known as Azure Active Directory, is required.
Possesses a solid grasp of identity and access management principles and best practices.
Proficiency in Conditional Access, Multi-Factor Authentication (MFA), authentication methodologies, and enterprise application integration is required.
Proficiency in implementing Single Sign-On (SSO) solutions through SAML, OAuth 2.0, or OpenID Connect (OIDC) is required.
Proficiency in configuring app registrations, managing service principals, handling API permissions, and overseeing secrets and certificates is required.
Proven expertise in authoring and executing PowerShell scripts is required.
Possesses foundational to intermediate-level proficiency in utilizing Microsoft Graph API.
Proficient in English, both spoken and written, with exceptional fluency required.
Proficient in the native language of the region with strong verbal and written communication skills.
Qualifications
BA/BSc/HND , MBA/MSc/MA
Experience Required
3 years
