Azure Active Directory

Azure Active Directory Engineer Jobs

3 jobs found

1d ago

Microsoft Security Engineer

GuidePoint Security Remote 🇺🇸 Remote

Remote

1d ago

Full time Active Directory Azure Azure Active Directory

Apply Now

Job Description

GuidePoint Security is seeking a hands-on Microsoft Security Engineer to join our Microsoft Cloud Security Team. The role centers on Entra ID, Purview, Intune, and Defender XDR, delivering security engagements toward an 80 percent billable target in a remote capacity with limited travel.

Responsibilities

Design and implement identity architecture for Entra ID and on-premises Active Directory, including hybrid sync via Entra Connect, Conditional Access, MFA and passwordless options, plus identity governance (PIM, RBAC, access reviews, entitlement management).
Enable application integration through SSO using SAML and OIDC, manage enterprise app registrations, and configure SCIM provisioning.
Assess and remediate identity risks using Entra ID Protection and analyze sign-in and audit logs; improve hybrid identity hygiene through stale object cleanup, privileged account reduction, and tiered admin models.
Data security and compliance with Purview: design and implement sensitivity labels, data loss prevention, and retention policies across Microsoft 365; support data classification, information protection rollouts, and data security posture assessments.
Provide support for eDiscovery, Insider Risk Management, communications compliance, and AI data security readiness (DSPM for AI) as engagements require.
Intune and Defender XDR: configure device compliance, configuration profiles, and application deployments across platforms; support Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps in cloud and hybrid environments.
Other duties as assigned.
Adhere to GuidePoint Security Core Values.

Requirements

Bachelor's degree preferred.
2 to 5 years in IT administration, identity management, or security operations.
Hands-on production experience with Microsoft Entra ID and on-premises Active Directory, including Conditional Access, MFA, RBAC, and hybrid identity (Entra Connect).
Knowledge of core authentication protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP.
Experience implementing Microsoft Purview (sensitivity labels, DLP, retention, or eDiscovery) and comfort supporting Intune and Defender XDR.
Basic PowerShell scripting for automation and reporting (for example, Microsoft Graph PowerShell).
Strong troubleshooting skills, meticulous attention to detail, and clear written and verbal communication.
openness to emerging technologies, including AI tools, to improve problem solving and business outcomes.

Technologies

Microsoft Entra ID
Active Directory
Conditional Access
RBAC
PIM
SAML
OAuth 2.0
OIDC
Kerberos
LDAP
SCIM
Entra ID Protection
Purview
DLP
eDiscovery
Intune
Defender XDR
Defender for Endpoint
Office 365
Microsoft Graph PowerShell
PowerShell
Azure Policy
Azure
SharePoint Online
Teams
Power BI
Fabric
Copilot Studio
Azure AI Foundry
Entra Connect
Microsoft 365
DSPM

Benefits

Remote workforce primarily; U.S. based; some travel may be required for certain positions; on-site work may be required for Federal positions.
Group Medical Insurance options include a Zero Deductible PPO plan with GuidePoint covering 90% of the employee premium and 70% for family plans, or a High Deductible Health Plan with HSA with GuidePoint covering 100% of the employee premium and 75% for family plans; HDHP/HSA includes quarterly employer contributions of $850 per employee or $1,750 per family annually.
Group Dental Insurance with GuidePoint paying 100% of the employee premium and 75% of family plans.
12 corporate holidays and a Flexible Time Off program.
Healthy mobile phone and home internet allowance.
Eligibility for retirement plan after two months at open enrollment.
Pet benefit option.

Travel Requirements

This role is 100% remote with travel limited to less than 10 percent for corporate events.

Physical Requirements

Sedentary work.
Substantial repetitive movement of the wrists, hands, and fingers for up to 8 hours per day.
Close visual acuity to view computer terminals and extensive reading for up to 8 hours per day.

Location

Remote

View full job page →

9d ago

Cybersecurity Engineer - PAM

Solu Technology Partners Buffalo, NY

Buffalo, NY

9d ago

$162k - $162k/yr Full time Active Directory Azure Azure Active Directory

Apply Now

Job Description

The Cybersecurity Engineer specializing in Privileged Access Management (PAM) and Secrets Management will design, implement, and support PAM and Secret lifecycle solutions across hybrid cloud environments from an onsite location in Buffalo, NY.

Responsibilities

Design, implement, administer, and optimize enterprise PAM solutions to enforce least privilege and secure privileged access.
Manage credential vaulting, privileged session control, access policy enforcement, credential rotation, and audit logging.
Implement and support secrets management using Azure Key Vault for secure storage and lifecycle management of application secrets, certificates, and encryption keys.
Develop and maintain controls that enable just-in-time access, credential rotation, and continuous privileged session monitoring.
Ensure PAM deployments comply with security, compliance, audit, and regulatory requirements.
Integrate PAM and secrets management capabilities into CI/CD pipelines and modern DevOps workflows.
Develop automation with PowerShell, REST APIs, and other scripting technologies to streamline onboarding, credential management, provisioning, and lifecycle operations.
Create reusable automation for onboarding privileged accounts, password rotation, access workflows, and platform integrations.
Collaborate with DevOps, cloud, and application development teams to embed security controls into cloud-native and enterprise applications.
Design and support secure PAM integrations across hybrid infrastructure including Windows, Linux, Active Directory, Entra ID, and Microsoft Azure.
Support a highly available, resilient, and scalable PAM platform architecture.
Implement authentication, authorization, logging, monitoring, and security controls across enterprise environments.
Troubleshoot complex identity and privileged access issues while maintaining operational excellence.
Partner with infrastructure, identity, cloud, application, and security teams to strengthen privileged access security.
Participate in security architecture reviews and advise on improvements to privileged access controls.
Support internal and external audits by providing documentation, reporting, and evidence of security controls.
Develop operational procedures, standards, and technical documentation for PAM services.

Requirements

This opportunity is not open to C2C relationships or visa sponsorship.
Local candidates only.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
Demonstrated expert-level experience designing, implementing, and supporting Privileged Access Management and Secrets Management solutions within large enterprise environments.
Strong hands-on experience with CyberArk Privileged Access Management, including:
- Credential vaulting
- Privileged session management
- Access policy management
- Credential lifecycle automation
- Audit logging
Experience implementing and administering Azure Key Vault.
Experience automating security processes using PowerShell and REST APIs.
Solid understanding of least privilege, privileged identity security, credential rotation, and privileged access governance.
Experience supporting Windows and Linux server environments.
Strong knowledge of Active Directory and Microsoft Entra ID.
Experience integrating security controls into DevOps and CI/CD pipelines.
Excellent analytical, troubleshooting, communication, and collaboration skills.

Technologies

CyberArk
Azure Key Vault
PowerShell
REST APIs
Active Directory
Microsoft Entra ID
Microsoft Azure
Windows
Linux
GitLab
Ansible
CyberArk Cloud or DevOps Extensions (CDE)

Preferred Qualifications

Experience with CyberArk Cloud or DevOps Extensions (CDE).
Experience with GitLab and Ansible.
Experience integrating PAM solutions with cloud-native applications and infrastructure.
Experience supporting highly regulated environments such as financial services, healthcare, or government.
Knowledge of enterprise authentication, authorization, logging, monitoring, and security architecture best practices.
Industry certifications such as CyberArk Defender/Sentry, Microsoft Azure Security, CISSP, Security+ or related credentials are preferred.

View full job page →

1mo ago

Cybersecurity Engineer Principal

General Dynamics Information Technology Tampa, FL

Tampa, FL

1mo ago Closed

$130k - $173k/yr Full time Active Directory Azure Active Directory Cloud Platforms

This position is no longer accepting applications (closed Jul 12, 2026).

Job Description

Responsibilities

Manage and maintain Azure AD/Entra ID, including hybrid identity configurations and integrations with on-premises Active Directory.
Configure and optimize Azure AD for secure access, identity governance, conditional access, and multi-factor authentication (MFA).
Implement and maintain Single Sign-On (SSO) across cloud-based applications for seamless access.
Monitor Azure AD health and resolve synchronization or performance issues.
Administer and optimize Azure infrastructure services, including virtual machines, networking, storage, and identity services.
Support Azure-based applications with proper security measures such as RBAC, identity management, and privileged identity protection.
Collaborate with cloud architects and development teams to design scalable, secure Azure environments aligned to business needs.
Implement and manage security and compliance features such as Data Loss Prevention (DLP), Information Rights Management (IRM), and Conditional Access policies.
Provide guidance for M365 user provisioning, licensing, and troubleshooting.
Oversee on-premises Active Directory environments, including domain controllers, group policies, forests, trusts, and replication.
Implement and manage AD object lifecycle, security groups, user accounts, and service accounts; perform regular audits to ensure security best practices.
Design high-availability AD architectures to minimize downtime and support disaster recovery readiness.
Administer identities through Okta Identity Management and implement automation using Okta Workflows; manage Okta Federation across systems.
Ensure compliance with corporate security policies and frameworks such as GDPR, HIPAA, and SOC2; participate in security audits and incident response.
Proactively identify and mitigate security risks via continuous monitoring, patch management, and system hardening.
Perform monitoring, diagnostics, and performance tuning for AD, Entra ID, Azure, and M365 environments; troubleshoot performance issues to minimize business impact.
Develop automation and scripting (PowerShell, Azure CLI) to improve operational efficiency; create and maintain documentation for configurations and procedures.
Train and mentor junior engineers, sharing expertise across the IT organization.

Requirements

Education: Bachelor’s degree; in lieu of degree, 12+ years of related experience.
Required Experience: 8+ years of related experience.
Required Skills and Abilities: Cybersecurity engineering with a focus on Active Directory, Azure AD (Entra ID), Azure, Okta Cloud Administration, and Microsoft 365 administration.
Preferred Skills: Identity management, hybrid cloud environments, and enterprise-scale IT infrastructure; proficiency in PowerShell scripting and automation tools; strong networking knowledge (firewalls, VPNs, DNS).
Location: Tampa, FL.
Clearance & Citizenship: Must have an active TS/SCI security clearance; U.S. citizenship required.

Technologies

Azure AD / Entra ID
Azure
Okta Cloud Administration
Okta Workflows
Microsoft 365 administration
PowerShell
Azure CLI
Active Directory

Work Requirements

Experience: 8+ years in related roles; may vary based on training, certifications, or degree.
Travel: Less than 10%.
Citizenship: U.S. Citizenship Required.
Certification: May vary based on training and certifications.

Salary and Benefits

The likely salary range for this position is USD 129,813 - 172,500 per year. This range is not a guarantee of compensation; final pay depends on experience, geographic location, and contractual requirements.

View full job page →

Azure Active Directory Engineer Jobs

Microsoft Security Engineer

Cybersecurity Engineer - PAM

Cybersecurity Engineer Principal

Get Azure Active Directory Engineer Jobs alerts