Are you ready to lead the charge in transforming identity security controls across a global enterprise environment?About the RoleThis role involves designing, implementing, and enhancing identity security controls using the Microsoft Entra ID platform. The position exists to ensure robust identity management and security for a global enterprise, contributing to the organization's compliance and security posture. The successful candidate will focus on enterprise passkey deployment and the deprecation of legacy authentication methods.
Key Responsibilities- Design and lead the enterprise rollout of Microsoft Entra passkey support.
- Configure Authentication Methods policies and define enrollment strategies for end users.
- Retire SMS and voice call authentication methods and establish phishing-resistant MFA.
- Architect and maintain Conditional Access policies governing sign-in risk and device compliance.
- Review and remediate OAuth/OpenID Connect and SAML application permissions.
- Manage the intake, review, and approval process for new App Registrations in Entra ID.
- Configure and tune sign-in risk and user risk policies and respond to risk detections.
Minimum Requirements- 5 years of hands-on experience administering Microsoft Entra ID (Azure AD) in an enterprise environment.
- Experience leading a passkey/FIDO2 rollout to full production at enterprise scale.
- Experience retiring legacy authentication methods in a production tenant.
- Strong knowledge of Conditional Access policy design and enforcement.
- Experience with enterprise application integration and OAuth permission governance.
- Proficiency with Entra ID Protection and related Microsoft security tools.
- Proficiency with PowerShell and Microsoft Graph API for identity automation.
- Understanding of enterprise change management and compliance/audit expectations.
- Excellent communication skills for cross-functional coordination.
Preferred Qualifications- Microsoft certifications such as SC-300 (Identity and Access Administrator) or equivalent.
- Experience in large, multi-region environments with 5,000 identities or in highly regulated enterprises.
- Familiarity with hybrid identity and legacy AD-to-cloud migration considerations.
Work Environment- Remote or Hybrid work options supporting a global enterprise environment, with Raleigh or Salem as location options.
