Are you ready to lead the charge in transforming identity security controls across a global enterprise environment?
About the Role
This role involves designing, implementing, and enhancing identity security controls using the Microsoft Entra ID platform. The position exists to ensure robust identity management and security for a global enterprise, contributing to the organization's compliance and security posture. The successful candidate will focus on enterprise passkey deployment and the deprecation of legacy authentication methods.
Key Responsibilities
- Design and lead the enterprise rollout of Microsoft Entra passkey support.
- Configure Authentication Methods policies and define enrollment strategies for end users.
- Retire SMS and voice call authentication methods and establish phishing-resistant MFA.
- Architect and maintain Conditional Access policies governing sign-in risk and device compliance.
- Review and remediate OAuth/OpenID Connect and SAML application permissions.
- Manage the intake, review, and approval process for new App Registrations in Entra ID.
- Configure and tune sign-in risk and user risk policies and respond to risk detections.
Minimum Requirements
- 5 years of hands-on experience administering Microsoft Entra ID (Azure AD) in an enterprise environment.
- Experience leading a passkey/FIDO2 rollout to full production at enterprise scale.
- Experience retiring legacy authentication methods in a production tenant.
- Strong knowledge of Conditional Access policy design and enforcement.
- Experience with enterprise application integration and OAuth permission governance.
- Proficiency with Entra ID Protection and related Microsoft security tools.
- Proficiency with PowerShell and Microsoft Graph API for identity automation.
- Understanding of enterprise change management and compliance/audit expectations.
- Excellent communication skills for cross-functional coordination.
Preferred Qualifications
- Microsoft certifications such as SC-300 (Identity and Access Administrator) or equivalent.
- Experience in large, multi-region environments with 5,000 identities or in highly regulated enterprises.
- Familiarity with hybrid identity and legacy AD-to-cloud migration considerations.
Work Environment
- Remote or Hybrid work options supporting a global enterprise environment, with Raleigh or Salem as location options.
At Talent Wave Associates, we connect outstanding talent with exceptional opportunities. We're proud to be an Equal Opportunity Employer and are committed to fostering an inclusive, people-first recruiting experience. Ready to ride the wave of opportunity? Apply today!
As part of our commitment to a fair, consistent, and efficient recruitment process, we may use artificial intelligence (AI) tools to assist in the initial screening of applications submitted through our applicant tracking system. These tools help identify qualifications and experience that align with the role requirements. Please note that AI is used solely to support our recruiters. Final decisions are always made by the hiring manager and the hiring team. Importantly, no applicant data is shared externally through these AI tools. All information remains securely within our systems and is handled in accordance with our privacy and data protection policies.
#26-00474