Azure Entra ID Engineer

Description

At Edelman Financial Engines, we believe everyone deserves to move their financial life forward.We know that assets have the power to fund goals. Those numbers represent individual lifetimes filled with hard work and dreams for our clients and generations to follow. Our clients trust us to guide them forward with empathy, integrity, and invention. We uphold that same standard of respect and commitment for clients and colleagues alike.Founded on the idea that financial education is a fundamental right for everyone—not just the wealthy, Edelman Financial Engines continues to grow and challenge the status quo. We’re moving forward, together. If our purpose-driven commitment inspires you, we invite you to consider joining our team.As a Azure Entra ID Engineer on the Identity & Access Management Team, you’ll play a critical role as an SME for both on-premises and cloud-based Microsoft identity platforms with design, deployment and day-to-day operational support experience.In addition to an earnest desire and passion to help people, the ideal candidate will complement the team’s existing talents. For this role, we are looking for someone who has a creative spirit and fresh insights to help us continuously improve and accelerate our focus on innovation and first class integrations. If you have a 6+ years experience in identity management or equivalent technical experience, this may be an ideal match for you!Responsibilities:

• Design, implement, and support both on-premises Active Directory and Azure AD services for SSO, multifactor authentication, Zero Trust, user access provisioning services, automation, integrations, and lifecycle management, collaborate with IT and product teams for SSO and user registration.
• Provision, configure & support resilient cloud deployment architecture, maintaining SOC2 compliance.
• Take the lead in managing and enhancing system scalability and capacity, ensuring service remains online and performing optimally. Be at the forefront of maintaining the balance between business necessities and product demands, by crafting and reviewing operation runbooks .
• Oversee SSO/identity services vendor platforms specifically for multiple SOC2 controlled environments, work with other Identity Platform engineers in deploying and maintaining services.
• Participate in periodic SOC2 audit processes.

Requirements:

• 6+ years of hands-on experience in designing, managing, implementing, and supporting Microsoft on-premises identity (AD/ADFS/Certificate Services), hybrid, cloud identity, and access technologies and solutions.
• Hands-on experience planning and deploying AAD Identity services including third-party identities, AAD licensing, conditional access policies, MFA, AAD Identity Protection, privileged identity, access management, identity governance administration and hybrid/cloud device management within a complex environment.
• Some experience with Okta, CyberArk, Cloud Access Security Broker services, etc.
• Must be an effective communicator, possess critical-thinking and problem-solving skills, can self-manage tasks, goals, commitments, and work well alone or as a member of the team.