IT Solutions Eng.-Microsoft Entra ID & Active Directory Engineer

Your Key Responsibilities

Job Description

We are looking for a hands-on IT Solution Engineer with deep expertise across Microsoft Entra ID and on-premises Active Directory to design, implement, and continuously optimize identity and access management solutions in hybrid enterprise environments.This role focuses on tenant and forest governance, tiered administration and privileged access, application and authentication lifecycle management, and modern SSO architectures — enabling secure, scalable, and automated identity platforms for our organization and customers.

 Key Responsibilities: 

• Design and operate hybrid identity architectures spanning Entra ID and on-premises AD DS.
• Design and enforce a tiered administration model (Tier 0/1/2), including PAWs, clean-source principles, and control-plane boundaries.
• Manage and optimize AD forests and domains: trusts, replication, sites and services, DNS, Group Policy, and delegation.
• Manage and optimize Entra ID tenants, including administrative units, RBAC, and security boundaries.
• Design privileged access concepts using Entra PIM, tier-0 protection, and Domain Controller hardening.
• Operate hybrid sync and authentication via Entra Connect / Cloud Sync, including migration to cloud-native models.
• Design and maintain Entra App Registrations and Enterprise Applications across their lifecycle.
• Implement SSO using OAuth, OpenID Connect, SAML, and Kerberos/NTLM where needed.
• Define authentication and authorization flows, including Conditional Access and Identity Protection.
• Automate AD and Entra ID via Infrastructure as Code, APIs, and scripting (Microsoft Graph, PowerShell, Terraform).
• Drive security hardening: attack-surface reduction, legacy auth decommissioning, and identity-attack defense.
• Establish automated testing, monitoring, and compliance checks across both platforms.
• Build a monitoring and governance framework, including tier-model compliance.
• Document architectures and processes, and train internal teams on identity, tiering, and DevOps topics.
• Act as a technical advisor to internal stakeholders and customers on IAM topics.

Your Qualifications

Qualification

• Fluent English is mandatory.
• Academic degree in Computer Science, Information Technology, or equivalent practical experience.
• Several years of hands-on experience with both Entra ID (Azure AD) and on-premises AD in enterprise environments.
• Strong expertise in Entra ID tenant management, app registrations, enterprise apps, and SSO integrations.
• Demonstrable experience designing tiered administration models (Tier 0/1/2) and privileged access management.
• Solid AD DS internals: forests, domains, trusts, replication, Group Policy, DNS, and delegation.
• Practical experience with Microsoft Graph API, automation, and scripting.
• Practical experience with hybrid identity (Entra Connect / Cloud Sync) and cloud migration.
• Solid knowledge of Conditional Access, Identity Protection, and Entra ID security best practices.
• Experience managing and optimizing Azure and Microsoft 365 identity-related services.
• Strong analytical skills, structured working style, and a security-first mindset.
• Ability to communicate complex identity concepts clearly to technical and non-technical audiences.