Senior Microsoft Security Entra Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security is a rapidly growing cybersecurity company that provides trusted expertise and solutions to help organizations minimize risk. They are seeking a Senior Entra Engineer to join their Microsoft Cloud Security Team, where the role involves designing, implementing, and troubleshooting complex Entra environments for various clients.

Responsibilities:

• Design and implement end-to-end Entra ID environments, including tenant architecture, dynamic groups, administrative units, and identity lifecycle management at scale
• Design and implement Conditional Access (including advanced scenarios like Global Secure Access, token protection, and authentication strengths), MFA/passwordless, PIM, RBAC, access reviews, and entitlement management
• Own hybrid identity design and troubleshooting, including Entra Connect / Cloud Sync, Entra Connect Health, password Hash Sync vs. pass-through auth vs. federation (ADFS), and Entra Domain Services
• Design and support identity federation and integration between Entra ID and other identity providers (Okta, Ping Identity, ADFS, third-party SAML/OIDC IdPs), including migration scenarios moving customers onto Entra
• Integrate applications via SSO (SAML/OIDC), enterprise app registrations, SCIM provisioning, and application proxy/Global Secure Access for on-prem app publishing. Advanced understanding of SAML and OIDC tokens, custom claims, and troubleshooting SAML and OIDC-based authentication
• Design and implement Entra External ID (B2B/B2C) for partner and customer-facing identity scenarios
• Design and implement identity solutions for Workload Identities such as Managed Identities and Workload Identity Federation
• Investigate and remediate identity risks using Entra ID Protection, sign-in and audit logs, and Entra recommendations; drive hybrid identity hygiene (stale object cleanup, privileged account reduction, tiered admin models)
• Maintain deep knowledge of how Entra ID intersects with Azure, Microsoft Purview, Intune, and Defender XDR, and support those workstreams as engagements require
• Other duties as assigned
• Adhere to GuidePoint Security Core Values

Requirements:

• Bachelor's Degree and 3–5+ years of hands-on, production experience specifically in Microsoft Entra ID, in addition to broader IT administration, identity management, or security operations experience
• Deep working knowledge of Conditional Access, MFA/passwordless, PIM, RBAC, access reviews, and entitlement management
• Strong hands-on experience with hybrid identity: Entra Connect/Cloud Sync, on-premises Active Directory, and the tradeoffs between password hash sync, pass-through authentication, and federation
• Knowledge of core authentication and provisioning protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP, and SCIM
• Experience integrating or migrating identity with other IdPs (Okta, Ping, ADFS, or similar) alongside or into Entra ID
• Comfortable troubleshooting complex, real-world identity issues independently, including sign-in failures, sync errors, and token/claims issues
• Basic to intermediate PowerShell scripting for automation and reporting (e.g., Microsoft Graph PowerShell)
• Experience embracing emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes
• Strong troubleshooting skills, attention to detail, and clear written and verbal communication; this role frequently leads to client-facing identity conversations
• Entra External ID (B2B/B2C) design and implementation
• Advanced on-premises AD work: multi-domain/forest design, migrations, tiered administration, legacy auth cleanup
• Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery), Intune, or Defender XDR experience
• Microsoft Sentinel or broader SIEM/SOAR experience
• Relevant certifications such as SC-300 (Identity and Access Administrator), SC-500, MS-102
• Azure infrastructure and security (Azure Policy, network security, landing zones, RBAC)