Note: The job is a remote job and is open to candidates in USA. ETalentNetwork is recruiting for a Senior Azure Entra ID Identity Management Developer / Cloud Engineer to support the Judicial Council. The role designs, secures, automates, and governs enterprise-scale identity and access management using Microsoft Entra ID, including authentication, identity governance, application integration, compliance, and cross-functional modernization initiatives.
Responsibilities
- Design and document scalable Azure Entra ID tenant topologies, including multi-organization frameworks and external B2B/B2C collaboration structures
- Establish and enforce enterprise-wide identity standards, architecture guardrails, and naming conventions across all business units and branches
- Architect and manage secure deployment matrices for workload identities, including Service Principals, Managed Identities, and application registrations
- Configure and deploy a comprehensive Conditional Access policy suite tailored to role-based risks and user sign-in risk levels
- Implement and scale passwordless authentication mechanisms across the enterprise, including FIDO2 security keys, Passkeys, and Windows Hello for Business
- Deploy and tune Identity Protection policies to enable automated risk-based authentication and real-time remediation of compromised accounts
- Establish secure lifecycle management and automated rotation frameworks for cryptographic keys, certificates, and application secrets
- Build and automate end-to-end Joiner, Mover, and Leaver (JML) user lifecycle workflows utilizing Microsoft Graph API, PowerShell, and Azure Functions
- Engineer self-service entitlement management catalogs and automate compliance-driven access reviews using Azure Logic Apps
- Formulate and enforce lifecycle governance policies for guest access, external partners, and B2B user permissions
- Integrate and onboard SaaS, on-premises, and custom-developed applications (.NET/C#) using standard OAuth 2.0, OpenID Connect, and SAML 2.0 protocols
- Configure custom token issuance, claims mapping, and MSAL-based authentication across single-page apps, web apps, and web APIs
- Develop and execute custom authentication extensions to dynamically inject external claims or modify default authentication flows
- Integrate identity configurations and policy changes into automated CI/CD pipelines to achieve Identity-as-Code (IaC)
- Write and maintain clean, reusable script libraries using PowerShell, Azure CLI, and Microsoft Graph SDKs to automate repetitive identity workflows
- Align and map Entra ID technical controls to regulatory frameworks, including NIST, FedRAMP, SOC 2, and ISO 27001
- Compile and deliver structured audit evidence packages to demonstrate the compliance and efficacy of identity controls
- Author technical runbooks for operational teams to streamline the monitoring, troubleshooting, and optimization of complex token and authentication flows
- Translate complex business and compliance requirements into comprehensive Technical Design Documents (TDD)
- Collaborate with security, application, DevOps, and infrastructure teams to drive enterprise-wide identity modernization initiatives
- Communicate high-level identity strategies and risk profiles effectively to non-technical stakeholders and executive leadership
Skills
- • Strong experience with Microsoft Entra ID / Azure AD architecture and administration
- • Proficiency in PowerShell scripting, Microsoft Graph API, and REST APIs
- • Knowledge of OAuth 2.0, OpenID Connect, SAML, and SCIM protocols
- • Experience with Conditional Access, MFA, and Identity Governance
- • Familiarity with Azure AD Connect, Hybrid Identity, and Single Sign-On (SSO)
- • Understanding of Zero Trust principles and modern authentication methods
- • Microsoft certifications such as SC-300 (Identity and Access Administrator) or AZ-104 (Azure Administrator)
- • Experience with Azure Functions, Logic Apps, or Power Automate for workflow automation
- • Background in security compliance frameworks (e.g., ISO 27001, NIST)
- O Translate business requirements into secure identity solutions
- O Communicate complex identity concepts to non-technical stakeholders
- O Drive identity modernization initiatives
- O Ability to partner with:
- O Cloud solution architects
- O DBAs
- O DevOps
- O Infrastructure admins
- • Azure AD B2C / External Identities (CIAM)
- • Cross-cloud identity (AWS, GCP federation)
- • Identity-related incident response
- • Strong problem-solving and analytical skills
- • Excellent communication and collaboration abilities
- • Ability to work in a fast-paced, dynamic environment
- • Microsoft Identity and Access Administrator
- • Azure Solutions Architect
- • Security-focused certifications
Benefits
- Remote position; onsite only when needed.
Company Overview