Job Description

Job Summary

Job Description – L3.2 Hybrid Azure AD (Entra ID) Engineer

Role Overview

We are looking for a highly experienced L3.2 Hybrid Azure AD (Entra ID) Engineer to lead and own enterprise identity services across on-prem Active Directory and Azure AD environments. This role goes beyond L3 support, involving deep technical expertise, architectural guidance, and proactive service improvements.

Key Responsibilities

1. Hybrid Identity Ownership

• Own and manage end-to-end Hybrid Identity architecture (AD + Azure AD / Entra ID)
• Design, implement, and optimize identity synchronization and authentication mechanisms
• Ensure high availability and resilience of identity services

1. Expert-Level Troubleshooting & RCA

• Act as the highest escalation point (L3.2/SME) for critical identity issues
• Lead troubleshooting of:
• Complex Azure AD Connect / sync failures
• Advanced authentication issues (SSO, MFA, federation)
• AD replication, trust, and connectivity issues
• Perform deep Root Cause Analysis (RCA) and implement permanent fixes

1. Identity Architecture & Security

• Provide guidance on:
• Identity architecture design & best practices
• Zero Trust implementation
• Conditional Access, Identity Protection, PIM strategies
• Drive improvements in identity security posture and compliance

1. Automation & Innovation

• Develop advanced automation using PowerShell, Azure Automation, Graph API
• Lead initiatives to optimize identity operations and reduce manual effort
• Build reusable scripts/tools for monitoring, reporting, and provisioning

1. Governance & Strategy

• Define and enforce identity governance standards, policies, and SOPs
• Participate in design reviews, audits, and transformation initiatives
• Ensure compliance with enterprise security and regulatory requirements

1. Collaboration & Leadership

• Work with cross-functional teams (Security, Cloud, Network, Apps)
• Provide technical mentoring to L2/L3 engineers
• Support application onboarding, federation, and SSO integration strategies

Required Skills

• Deep expertise in:
• Azure AD (Entra ID) – advanced/architect level
• Active Directory (AD DS, GPO, replication, trusts)
• Azure AD Connect / Entra Connect (advanced troubleshooting)
• Strong experience with:
• SSO (SAML, OAuth, OIDC), MFA, Conditional Access
• Federation (ADFS – strong preferred)
• Advanced PowerShell & automation skills
• Strong knowledge of identity security & Zero Trust principles

Experience

• 8–12+ years of IT experience
• Minimum 5–7 years in Hybrid Identity / Azure AD roles
• Experience in large enterprise / global environments

Preferred Skills

• Expertise in:
• Microsoft 365 ecosystem (Exchange, Teams identity dependencies)
• Intune / Endpoint Manager
• Knowledge of:
• Azure architecture and networking basics
• ITIL processes & service governance

Certifications (Highly Preferred)

• SC-300 – Identity & Access Administrator
• AZ-104 – Azure Administrator
• AZ-305 – Azure Solutions Architect (added advantage)
• ITIL Foundation

Key Expectations

• Provide technical leadership and SME support
• Ensure stability, scalability, and security of identity services
• Drive automation, transformation, and continuous improvement initiatives
• Minimize recurring incidents through proactive RCA and design improvements

Key Responsibilities

Job Description – L3.2 Hybrid Azure AD (Entra ID) Engineer

Role Overview

We are looking for a highly experienced L3.2 Hybrid Azure AD (Entra ID) Engineer to lead and own enterprise identity services across on-prem Active Directory and Azure AD environments. This role goes beyond L3 support, involving deep technical expertise, architectural guidance, and proactive service improvements.

Key Responsibilities

1. Hybrid Identity Ownership

• Own and manage end-to-end Hybrid Identity architecture (AD + Azure AD / Entra ID)
• Design, implement, and optimize identity synchronization and authentication mechanisms
• Ensure high availability and resilience of identity services

1. Expert-Level Troubleshooting & RCA

• Act as the highest escalation point (L3.2/SME) for critical identity issues
• Lead troubleshooting of:
• Complex Azure AD Connect / sync failures
• Advanced authentication issues (SSO, MFA, federation)
• AD replication, trust, and connectivity issues
• Perform deep Root Cause Analysis (RCA) and implement permanent fixes

1. Identity Architecture & Security

• Provide guidance on:
• Identity architecture design & best practices
• Zero Trust implementation
• Conditional Access, Identity Protection, PIM strategies
• Drive improvements in identity security posture and compliance

1. Automation & Innovation

• Develop advanced automation using PowerShell, Azure Automation, Graph API
• Lead initiatives to optimize identity operations and reduce manual effort
• Build reusable scripts/tools for monitoring, reporting, and provisioning

1. Governance & Strategy

• Define and enforce identity governance standards, policies, and SOPs
• Participate in design reviews, audits, and transformation initiatives
• Ensure compliance with enterprise security and regulatory requirements

1. Collaboration & Leadership

• Work with cross-functional teams (Security, Cloud, Network, Apps)
• Provide technical mentoring to L2/L3 engineers
• Support application onboarding, federation, and SSO integration strategies

Required Skills

• Deep expertise in:
• Azure AD (Entra ID) – advanced/architect level
• Active Directory (AD DS, GPO, replication, trusts)
• Azure AD Connect / Entra Connect (advanced troubleshooting)
• Strong experience with:
• SSO (SAML, OAuth, OIDC), MFA, Conditional Access
• Federation (ADFS – strong preferred)
• Advanced PowerShell & automation skills
• Strong knowledge of identity security & Zero Trust principles

Experience

• 8–12+ years of IT experience
• Minimum 5–7 years in Hybrid Identity / Azure AD roles
• Experience in large enterprise / global environments

Preferred Skills

• Expertise in:
• Microsoft 365 ecosystem (Exchange, Teams identity dependencies)
• Intune / Endpoint Manager
• Knowledge of:
• Azure architecture and networking basics
• ITIL processes & service governance

Certifications (Highly Preferred)

• SC-300 – Identity & Access Administrator
• AZ-104 – Azure Administrator
• AZ-305 – Azure Solutions Architect (added advantage)
• ITIL Foundation

Key Expectations

• Provide technical leadership and SME support
• Ensure stability, scalability, and security of identity services
• Drive automation, transformation, and continuous improvement initiatives
• Minimize recurring incidents through proactive RCA and design improvements

Skill Requirements

Job Description – L3.2 Hybrid Azure AD (Entra ID) Engineer

Role Overview

We are looking for a highly experienced L3.2 Hybrid Azure AD (Entra ID) Engineer to lead and own enterprise identity services across on-prem Active Directory and Azure AD environments. This role goes beyond L3 support, involving deep technical expertise, architectural guidance, and proactive service improvements.

Key Responsibilities

1. Hybrid Identity Ownership

• Own and manage end-to-end Hybrid Identity architecture (AD + Azure AD / Entra ID)
• Design, implement, and optimize identity synchronization and authentication mechanisms
• Ensure high availability and resilience of identity services

1. Expert-Level Troubleshooting & RCA

• Act as the highest escalation point (L3.2/SME) for critical identity issues
• Lead troubleshooting of:
• Complex Azure AD Connect / sync failures
• Advanced authentication issues (SSO, MFA, federation)
• AD replication, trust, and connectivity issues
• Perform deep Root Cause Analysis (RCA) and implement permanent fixes

1. Identity Architecture & Security

• Provide guidance on:
• Identity architecture design & best practices
• Zero Trust implementation
• Conditional Access, Identity Protection, PIM strategies
• Drive improvements in identity security posture and compliance

1. Automation & Innovation

• Develop advanced automation using PowerShell, Azure Automation, Graph API
• Lead initiatives to optimize identity operations and reduce manual effort
• Build reusable scripts/tools for monitoring, reporting, and provisioning

1. Governance & Strategy

• Define and enforce identity governance standards, policies, and SOPs
• Participate in design reviews, audits, and transformation initiatives
• Ensure compliance with enterprise security and regulatory requirements

1. Collaboration & Leadership

• Work with cross-functional teams (Security, Cloud, Network, Apps)
• Provide technical mentoring to L2/L3 engineers
• Support application onboarding, federation, and SSO integration strategies

Required Skills

• Deep expertise in:
• Azure AD (Entra ID) – advanced/architect level
• Active Directory (AD DS, GPO, replication, trusts)
• Azure AD Connect / Entra Connect (advanced troubleshooting)
• Strong experience with:
• SSO (SAML, OAuth, OIDC), MFA, Conditional Access
• Federation (ADFS – strong preferred)
• Advanced PowerShell & automation skills
• Strong knowledge of identity security & Zero Trust principles

Experience

• 8–12+ years of IT experience
• Minimum 5–7 years in Hybrid Identity / Azure AD roles
• Experience in large enterprise / global environments

Preferred Skills

• Expertise in:
• Microsoft 365 ecosystem (Exchange, Teams identity dependencies)
• Intune / Endpoint Manager
• Knowledge of:
• Azure architecture and networking basics
• ITIL processes & service governance

Certifications (Highly Preferred)

• SC-300 – Identity & Access Administrator
• AZ-104 – Azure Administrator
• AZ-305 – Azure Solutions Architect (added advantage)
• ITIL Foundation

Key Expectations

• Provide technical leadership and SME support
• Ensure stability, scalability, and security of identity services
• Drive automation, transformation, and continuous improvement initiatives
• Minimize recurring incidents through proactive RCA and design improvements

Other Requirements

Job Description – L3.2 Hybrid Azure AD (Entra ID) Engineer

Role Overview

We are looking for a highly experienced L3.2 Hybrid Azure AD (Entra ID) Engineer to lead and own enterprise identity services across on-prem Active Directory and Azure AD environments. This role goes beyond L3 support, involving deep technical expertise, architectural guidance, and proactive service improvements.

Key Responsibilities

1. Hybrid Identity Ownership

• Own and manage end-to-end Hybrid Identity architecture (AD + Azure AD / Entra ID)
• Design, implement, and optimize identity synchronization and authentication mechanisms
• Ensure high availability and resilience of identity services

1. Expert-Level Troubleshooting & RCA

• Act as the highest escalation point (L3.2/SME) for critical identity issues
• Lead troubleshooting of:
• Complex Azure AD Connect / sync failures
• Advanced authentication issues (SSO, MFA, federation)
• AD replication, trust, and connectivity issues
• Perform deep Root Cause Analysis (RCA) and implement permanent fixes

1. Identity Architecture & Security

• Provide guidance on:
• Identity architecture design & best practices
• Zero Trust implementation
• Conditional Access, Identity Protection, PIM strategies
• Drive improvements in identity security posture and compliance

1. Automation & Innovation

• Develop advanced automation using PowerShell, Azure Automation, Graph API
• Lead initiatives to optimize identity operations and reduce manual effort
• Build reusable scripts/tools for monitoring, reporting, and provisioning

1. Governance & Strategy

• Define and enforce identity governance standards, policies, and SOPs
• Participate in design reviews, audits, and transformation initiatives
• Ensure compliance with enterprise security and regulatory requirements

1. Collaboration & Leadership

• Work with cross-functional teams (Security, Cloud, Network, Apps)
• Provide technical mentoring to L2/L3 engineers
• Support application onboarding, federation, and SSO integration strategies

Required Skills

• Deep expertise in:
• Azure AD (Entra ID) – advanced/architect level
• Active Directory (AD DS, GPO, replication, trusts)
• Azure AD Connect / Entra Connect (advanced troubleshooting)
• Strong experience with:
• SSO (SAML, OAuth, OIDC), MFA, Conditional Access
• Federation (ADFS – strong preferred)
• Advanced PowerShell & automation skills
• Strong knowledge of identity security & Zero Trust principles

Experience

• 8–12+ years of IT experience
• Minimum 5–7 years in Hybrid Identity / Azure AD roles
• Experience in large enterprise / global environments

Preferred Skills

• Expertise in:
• Microsoft 365 ecosystem (Exchange, Teams identity dependencies)
• Intune / Endpoint Manager
• Knowledge of:
• Azure architecture and networking basics
• ITIL processes & service governance

Certifications (Highly Preferred)

• SC-300 – Identity & Access Administrator
• AZ-104 – Azure Administrator
• AZ-305 – Azure Solutions Architect (added advantage)
• ITIL Foundation

Key Expectations

• Provide technical leadership and SME support
• Ensure stability, scalability, and security of identity services
• Drive automation, transformation, and continuous improvement initiatives
• Minimize recurring incidents through proactive RCA and design improvements