Entra ID Customer Engineer

About the Role

We are looking for an Entra ID Customer Engineer to work directly with customer teams, providing expert advisory services across Microsoft identity technologies. In this role, you’ll use structured Microsoft Intellectual Property (MIP) and VBD engagements to build trusted relationships, guide customers through complex identity challenges, and help them achieve a secure, healthy, and well‑architected environment.

This is a hands‑on advisory position where you’ll influence strategy, lead technical conversations, and support customers through workshops, assessments, and solution guidance.

Relevant MIP / VBD Engagements

• On-Demand Assessment – Entra ID
• WorkshopPLUS – Microsoft Azure: Hybrid Identity
• WorkshopPLUS – Microsoft Entra: Identity Fundamentals
• Activate Azure with Multi-Factor Authentication and Conditional Access
• Onboarding Accelerator – Migrate Single Sign-On Applications to Entra
• Onboarding Accelerator – Azure Active Directory: Features Deployment
• Onboarding Accelerator – Entra Permissions Management
• WorkshopPLUS – Microsoft 365 Security and Compliance Technical Update Briefing

Core Skills & Expertise (300–400 level)

Entra ID & Identity Management

• RBAC, account and group management
• Service principals and enterprise application management
• Authentication models: Cloud Auth (PTA/PHS), federation
• Protocols: OAuth, SAML, OIDC, Kerberos, FIDO2/Passkeys

Device & Directory Integration

• Hybrid Join, Azure AD Join
• Account synchronization: Entra ID Connect, Entra Cloud Sync
• Integration with Active Directory

Security, Access & Governance

• Azure P1/P2 features
• Conditional Access, MFA, risk-based policies
• Reporting, troubleshooting
• SSPR, Entra Password Protection
• Policy configuration
• Entra ID Governance: PIM, periodic reviews, access reviews, compliance audits
• Entra ID Protection

Architecture & Automation

• Advanced D365 CE enterprise architecture
• Integration with external systems
• Dataverse and multi-source data integration
• Power Automate solutions with internal logic and service connections
• Microsoft Graph API (foundational knowledge)

Optional Skills (Nice to Have)

• ADFS
• Active Directory Certificate Services
• Azure Monitor, Azure Sentinel
• Defender for Endpoint
• Broader Azure services

Relevant Certifications

• Microsoft Certified: Identity and Access Administrator Associate (or equivalent)
• Microsoft Certified: Cybersecurity Architect Expert (or equivalent)
• Microsoft Certified Trainer (or equivalent)
• CISSP (or equivalent)