Senior Microsoft Security Entra Engineer

Responsibilities

• Design and implement end-to-end Entra ID environments, including tenant architecture and identity lifecycle management
• Implement Conditional Access, MFA, PIM, RBAC, and entitlement management
• Manage hybrid identity design using Entra Connect, Cloud Sync, and ADFS
• Support identity federation with providers like Okta, Ping Identity, and SAML/OIDC IdPs
• Integrate applications via SSO, SCIM provisioning, and application proxy
• Design Entra External ID (B2B/B2C) for partner and customer scenarios
• Implement identity solutions for Workload Identities and Managed Identities
• Investigate and remediate identity risks using Entra ID Protection and audit logs
• Support adjacent Microsoft security workstreams including Azure, Purview, Intune, and Defender XDR

Requirements

• Bachelor's Degree
• 3–5+ years of hands-on experience in Microsoft Entra ID
• Deep knowledge of Conditional Access, MFA, PIM, and RBAC
• Strong experience with hybrid identity (Entra Connect, on-premises AD)
• Proficiency in authentication protocols: SAML, OAuth 2.0, OIDC, Kerberos, LDAP, and SCIM
• Experience migrating or integrating identity with other IdPs (Okta, Ping, ADFS)
• Basic to intermediate PowerShell scripting (Microsoft Graph PowerShell)
• Strong troubleshooting skills for sign-in failures and token/claims issues

Preferred Qualifications

• Entra External ID (B2B/B2C) design experience
• Advanced on-premises AD expertise (multi-domain/forest design, migrations)
• Experience with Microsoft Purview, Intune, or Defender XDR
• Experience with Microsoft Sentinel or SIEM/SOAR
• Relevant certifications: SC-300, SC-500, or MS-102
• Azure infrastructure and security knowledge

About the Company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees and serves as a trusted advisor to more than 6,200 customers.