Job SummaryThe Senior Systems Engineer for Enterprise Cloud Identity & Security owns the organization's identity, authentication, authorization, trust boundaries, and security posture across both cloud and hybrid identity systems. This role administers Entra ID users, groups, domains, privileged roles, identity governance, hybrid identity integration with Active Directory, and the full authentication and SSO architecture. They define cross-tenant trust controls, device identity posture, Intune policy enforcement, Conditional Access requirements, and the identity and security signals that downstream systems-including Microsoft 365 and Copilot-depend on. This role ensures only trusted users, devices, and external identities can authenticate and gain access under the correct security conditions, establishing the foundational perimeter that all applications rely on for secure operation.
Applies and demonstrates mastery of the technical skills and knowledge of principles, theories and concepts and industry practices and standards to perform technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analysis for total systems.
Essential Functions & Key Responsibilities- Azure AD / Entra ID administration - users, groups, admin roles, privileged identity management, domain management.
- Coordinating Identity governance with IT Security - delegated admin models (GDAP/DAP), access reviews, least-privilege role design, directory hygiene.
- Active Directory (on-prem) administration & synchronization - hybrid identity, provisioning, inter-directory sync (Entra Connect/Cloud Sync).
- Authentication architecture & SSO - SAML, federation, certificates, token lifecycles, claim mapping.
- B2B trust controls - cross-tenant access settings, default external collaboration posture, identity provider federation, inbound/outbound trust rules.
- Device identity posture: Maintain strong identity signals across Entra Join / Hybrid Join, device trust, stale device cleanup, and platform SSO. Ensure all devices provide trustworthy identity claims so Copilot and Security Copilot rely on secure, high-integrity identity, device, MFA, risk, and access posture.
- Intune policy and mobile device management (iOS, Android, Windows): Oversee the full Intune policy lifecycle across all managed endpoints, including configuration of MDM/MAM profiles, deployment of compliance policies, enforcing device and location controls, and ensuring compliance signals accurately feed Conditional Access.
- Secure cloud data flow exchange oversight to external platforms (e.g. HR, payroll, and benefits), ensuring correct provisioning mappings, Conditional Access protections, and compliance alignment for all cloud data exchanges.
- This role works in partnership with the Security team, which owns global compliance, DLP, MFA, SIEM, and SOC operations.
- Coordinating with other IT or business teams when necessary.
- Meets with IT leadership to assess and define the system requirements.
- Analyzes network data and infrastructure to determine inefficiencies and problems. Maintains expert operating efficiency and stability, ensure the security and integrity of all systems and data, and respond to complex outages and other issues.
- Manages project timelines, budgets, and documentation. Collaborates with project teams to enable them with infrastructure, system technology architecture, diverse and complex projects and products.
- Leverages tools and custom applications to monitor the operational status of applications, infrastructure, networks, databases to optimize system performance.
- Troubleshoots technical issues and prepares root cause analysis of service interruptions, recovery and creating preventative measures.
- Prepares network analytics, data reports, and operational manuals.
- Keeping abreast of the latest advancements in technology, protocols, and best practices.
- Coordinates with department leadership to plan, design, and schedule the release of all software, hardware, and operating system updates.
- Develops and enhances processes and technical documentation, create back-up procedures, test plans, and reports.
- Provides coverage in a rotating, on-call after hours schedule.
Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.
