Senior Entra ID Engineer (IAM)

About the role

TE is looking for a senior professional to design, operate, and modernize its Microsoft Entra ID environment. The role blends day‑to‑day engineering with strategic initiatives such as ADFS decommissioning, MFA rollouts, and Conditional Access governance.

Key responsibilities

• Support enterprise application onboarding and migration to Entra ID (SSO, OAuth/OIDC, SAML) and manage ADFS decommissioning projects.
• Implement and maintain Conditional Access policies and MFA rollout waves, ensuring stability and handling exceptions.
• Operate and monitor the Microsoft Entra ID tenant, including directory synchronization, authentication flows, and service‑health alerts.
• Collaborate with InfoSec, Architecture, IAM Architects, and platform teams to align engineering execution with enterprise standards and governance.

Required profile

• Hands‑on, deep experience administering Microsoft Entra ID in a large enterprise.
• Practical experience with SSO protocols (SAML, OAuth 2.0, OpenID Connect), Conditional Access, MFA, and directory synchronization.
• Ability to troubleshoot identity issues across applications, users, and directory services.
• Strong collaboration skills within a matrixed IAM operating model.

Required skills

• Microsoft Entra ID administration
• SSO protocols: SAML, OAuth 2.0, OpenID Connect
• Conditional Access and Multi‑Factor Authentication
• Directory synchronization and hybrid identity (password hash sync)