Note: The job is a remote job and is open to candidates in USA. Tryfacta is a workforce management solutions provider serving private- and public-sector organizations across the United States. The Cloud Engineer will architect and administer Microsoft Entra ID environments, implement secure authentication and identity governance, automate lifecycle workflows, integrate applications and APIs, and support compliance and enterprise identity modernization initiatives.
Responsibilities
- Design and document scalable Azure Entra ID tenant topologies, including multi-organization frameworks and external B2B/B2C collaboration structures
- Establish and enforce enterprise-wide identity standards, architecture guardrails, and naming conventions across all business units and branches
- Architect and manage secure deployment matrices for workload identities, including Service Principals, Managed Identities, and application registrations
- Configure and deploy a comprehensive Conditional Access policy suite tailored to role-based risks and user sign-in risk levels
- Implement and scale passwordless authentication mechanisms across the enterprise, including FIDO2 security keys, Passkeys, and Windows Hello for Business
- Deploy and tune Identity Protection policies to enable automated risk-based authentication and real-time remediation of compromised accounts
- Establish secure lifecycle management and automated rotation frameworks for cryptographic keys, certificates, and application secrets
- Build and automate end-to-end Joiner, Mover, and Leaver (JML) user lifecycle workflows utilizing Microsoft Graph API, PowerShell, and Azure Functions
- Engineer self-service entitlement management catalogs and automate compliance-driven access reviews using Azure Logic Apps
- Formulate and enforce lifecycle governance policies for guest access, external partners, and B2B user permissions
- Integrate and onboard SaaS, on-premises, and custom-developed applications (.NET/C#) using standard OAuth 2.0, OpenID Connect, and SAML 2.0 protocols
- Configure custom token issuance, claims mapping, and MSAL-based authentication across single-page apps, web apps, and web APIs
- Develop and execute custom authentication extensions to dynamically inject external claims or modify default authentication flows
- Integrate identity configurations and policy changes into automated CI/CD pipelines to achieve Identity-as-Code (IaC)
- Write and maintain clean, reusable script libraries using PowerShell, Azure CLI, and Microsoft Graph SDKs to automate repetitive identity workflows
- Align and map Entra ID technical controls to regulatory frameworks, including NIST, FedRAMP, SOC 2, and ISO 27001
- Compile and deliver structured audit evidence packages to demonstrate the compliance and efficacy of identity controls
- Author technical runbooks for operational teams to streamline the monitoring, troubleshooting, and optimization of complex token and authentication flows
- Translate complex business and compliance requirements into comprehensive Technical Design Documents (TDD)
- Collaborate with security, application, DevOps, and infrastructure teams to drive enterprise-wide identity modernization initiatives
- Communicate high-level identity strategies and risk profiles effectively to non-technical stakeholders and executive leadership
Skills
- Strong experience with Microsoft Entra ID / Azure AD architecture and administration
- Proficiency in PowerShell scripting, Microsoft Graph API, and REST APIs
- Knowledge of OAuth 2.0, OpenID Connect, SAML, and SCIM protocols
- Experience with Conditional Access, MFA, and Identity Governance
- Familiarity with Azure AD Connect, Hybrid Identity, and Single Sign-On (SSO)
- Understanding of Zero Trust principles and modern authentication methods
- Microsoft certifications such as SC-300 (Identity and Access Administrator) or AZ-104 (Azure Administrator)
- Experience with Azure Functions, Logic Apps, or Power Automate for workflow automation
- Background in security compliance frameworks (e.g., ISO 27001, NIST)
- Translate business requirements into secure identity solutions
- Communicate complex identity concepts to non-technical stakeholders
- Drive identity modernization initiatives
- Ability to partner with:
- Cloud solution architects
- DBAs
- DevOps
- Infrastructure admins
- Azure AD B2C / External Identities (CIAM)
- Cross-cloud identity (AWS, GCP federation)
- Identity-related incident response
- Strong problem-solving and analytical skills
- Excellent communication and collaboration abilities
- Ability to work in a fast-paced, dynamic environment
- Microsoft Identity and Access Administrator
- Azure Solutions Architect
- Security-focused certifications
Benefits
- This position is a remote position and will be onsite only when needed. The remote status of this position is subject to change if deemed necessary by the client.
Company Overview
Company H1B Sponsorship