Microsoft Entra Identity Engineer(Azure AD)

Job title: Microsoft Entra Identity Engineer(Azure AD) - Contract roleWork location: Customer Location Onsite United Kingdom- work from officeMinimum Exp: 4+yrs of experience in Entra ID engineeringResponsibilities and Duties:Analyze, design, implement, and support the hybrid on-prem and cloud Active Directory environment and Azure Active Directory/Entra ID.Collaborate with business and technical partners to integrate systems and applications with centralized authentication such as Active Directory or Azure Active Directory/Entra ID.Provide subject matter knowledge and expertise on Active Directory, Azure Active Directory/Entra ID and Active Directory synchronization.Support and maintain Active Directory Federation Services (ADFS) environments and Entra ID Enterprise Applications.Collaborate closely with cross-functional teams to ensure the stability, scalability, and security of the Active Directory and Azure Active Directory/Entra ID environments and Ping Federate. Actively participates in discussions on all aspects of identity and access management.Implement security baselines and recommended security best practices on centralized authentication platforms such as Active Directory and Azure Active Directory/Entra ID.Perform regular health checks and proactively identify and resolve issues to avoid negative impacts to production systems.Comprehensive knowledge and experience with authentication standards and technologies such as multi factor authenticationContinually monitor the performance and capacity baselines of the authentication platforms and recommend and implement enhancements.Lead response and resolution of complex, high severity incidentsLead regular reviews of deployed infrastructure, develop detailed architecture, and create and update new technical documentation and Standard Operating Procedures (SOPs).Analyze the current authentication services platforms to identify both technical and operational opportunities for enhancements and develop continuous improvement action plans.Discover opportunities to automate existing manual processes and introduce new automation to enhance security posture and remove manual efforts through automated solutions using scripts, pipelines etc.Actively seeks to research innovations in IT security as well as IAM technologies and service and strives to ensure client continues to deliver best practices and standards.Provide on-call support as needed for operational continuity of Identity platforms.Support requests for audit and any required remediation activities.Key skills required:Proven experience as a Senior Active Directory/Entra ID Engineer or similar role with minimum 4 years of experienceAdvanced knowledge of Active Directory, Azure Active Directory/Entra ID, Lightweight Directory Access Protocol, Active Directory Federation Services and other centralized identity stores.Strong understanding of Microsoft Azure and familiarity with IAM permissions on Management Groups, subscriptions and resources.Provide expert knowledge of Azure Active Directory/Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager and Application RegistrationsExpert knowledge of Active Directory attributes, LDAP Queries, PowerShell Scripting, Active Directory Federation Services (ADFS), Group Policy Object (GPO) analysis, configuration and item-level targeting, active directory replication, Active Directory backup and restore as well as certificate installation.Strong knowledge of Windows Server operating systems and Active Directory/Azure Active Directory/Entra ID servicesExpert knowledge of PowerShell scripting with proven experience implementing automation including experience utilizing APIs such as Microsoft Graph.Strong knowledge of Single-Sign On and authentications protocols such as SAML & OIDCExpert knowledge of security best practices for Active Directory and Azure Active Directory/Entra IDExpert knowledge with directory synchronization tools, such as Azure Active Directory/Entra ID Connect and Active Directory integration.Excellent problem-solving skills and ability to work well under pressure.High-energy, detail-oriented, proactive, and able to handle multiple high-priority demands while driving consistent results.Strong communication and collaboration skills to work effectively with cross-functional teams.Experience with one or more programming languages such as C++, Java, Python, Javascript, or C#Experience with Windows, Linux / Unix, scripting (Bash, Powershell, or Perl), LDAP, SQL, and web services.Familiarity with Agile delivery methodologies and experience working within such frameworks.A customer-focused mindset to ensure that solutions meet the needs of various operating companies within the groupStrong problem-solving skills and the ability to analyze complex systems and workflows.Certification:Microsoft Certified: Identity and Access Administrator AssociateOther requirements: Candidate must be ready to work on rotational shifts for 24X7X365 coverage support