Microsoft Entra ID Active Directory Hybrid Identity Federation
SSO, MFA
Conditional Access & Identity security best practices MS Entra ID Platform Engineering & Administration Engineer, administer, and support Microsoft Entra ID Services, including tenant configuration, sync, authentication methods, identify protection capabilities, and access policies. Discover, Design, implement, govern and maintain security identity solutions for human and non-human accounts. Support hybrid identity environments integrating on premise Active Directory and Microsoft Entra ID. Manage directory synchronization, federation, and authentication services, including MS Entra Connect and cloud sync solutions. Extensive experience integrating enterprise, SaaS, cloud and custom applications with MS Entra ID. Experience migrating large portfolios of applications from legacy authentication platforms to MS Entra ID. Configure and maintain enterprise application integrations for SAML, OAuth, OpenD Connect and WS- deration. IAM Operations & Service Ownership (24 x 7) Administer, and maintain end-to-end availability, reliability and performance of IAM platforms Participate in 24x7 on call rotation, coverage and escalation paths Participate in major incident (P1/P2) response for identity and access disruptions Manage IAM TDX ticket ques, ensure remediation - responses, problem resolution, and root cause analysis (RCA), documentation and communication are tracked and complete within appropriate SLA's. Maintain continuous audit readiness posture Maintain dashboards for IAM service health: to include system Vendor Product Lifecycle, Maintenance & Upgrade Management Execute product upgrades within IAM global calendar lifecycle, following appropriate IAM processes, documentation, testing, change management and communications. Maintain current vendor-supported versions to minimize risk exposure Evaluate vendor release notes for security vulnerability fixes, major and minor releases, and integration impacts. Partner with vendors and managed service providers for platform optimization and support escalations. Change Management & Release Governance Ensure change management processes and procedures are followed.
That includes:
all appropriate documentation, testing, peer review, Pre-CAB, CAB. Ensure appropriate coordination with other teams and communication with CAB Ensure all changes have appropriate rollout plan inclusive of impact assessment, backout plan, and post implementation support. Platform Engineering & Best Practices Design, collaborate, and enforce IAM architecture and configuration standards and utilize industry best practices. Maintain standard operating procedures (SOP's) and runbooks for operational maintenance & upgrades, incident response and system recovery, as well as operational readiness to respond to security incidents (SI). Promote automation including scripting (various types), use of orchestration tools (Jenkins), Api's,etc. Promote adherence to best practices - (SOD) separation of duties, (PAM) privilege access management, (AM) access management and the use of least privilege principles.
