Security Operations Engineer - Identity & Access Management

Security Operations Engineering

Overview

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.

The Identity & Access Management (IAM) Protect team within the CISO organization is seeking a motivated Security Operations Engineer to join our Identity Operations team. This role is focused on driving operational excellence across Microsoft Identity services, providing DRI and on-call support for production systems, and building automation to reduce undifferentiated operational work and improve reliability. The engineer will emphasize first-contact resolution, shift-left practices, and deep root-cause analysis to minimize customer disruption, while channeling operational insights and customer feedback back into IAM service teams to continuously improve reliability and experience. The ideal candidate brings foundational identity knowledge, strong analytical skills, and a passion for growing into an Identity engineering role, with an interest in leveraging AI-assisted insights to advance operational maturity over time.

Responsibilities

• Participate in on-call rotations with guidance, supporting identity services and following established procedures.
• Provide day-to-day operational support for Microsoft Entra ID / Azure Active Directory.
• Perform standard identity lifecycle tasks, including access provisioning, deprovisioning, and group or role updates.
• Troubleshoot common identity issues such as MFA failures, Conditional Access blocks, sign-in problems, device join issues, and directory sync errors, escalating when needed.
• Monitor service health, logs, and alerts to support service reliability and security compliance.
• Assist with incident triage and resolution, providing timely updates and clear communication.
• Participate in post-incident reviews and support follow-up actions to prevent repeat issues.
• Learn and apply basic scripting and automation to reduce manual operational tasks.
• Help identify recurring issues and work with senior engineers to improve processes and reduce operational noise.
• Participate in a 16x7 support model through scheduled shifts and on-call rotations to ensure continuous operational support for identity services.

Qualifications

• 1–3 years of experience in IT operations, technical support, security operations, or a related role.
• Basic understanding of identity and access concepts, including authentication and authorization.
• Familiarity with Microsoft Entra ID / Azure Active Directory and common identity features such as MFA and Conditional Access.
• Exposure to identity lifecycle processes, device identity, and directory synchronization concepts.
• Ability to follow troubleshooting guidance and review basic identity logs.
• Strong willingness to learn, problem-solve, and support customers effectively.
• Good communication and collaboration skills.

Preferred Qualifications

• Experience administering Microsoft Entra ID / Azure Active Directory.
• Exposure to scripting or automation using PowerShell or Python.
• Familiarity with monitoring or incident management tools such as Azure Monitor, Kusto, or IcM.
• Interest in improving operational reliability and reducing repeat issues.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Experience Level

Mid Level