Senior Technical Analyst - Azure Entra ID L3

This role will be primarily focused on delivering a BAU / Project services within a shared service delivery model.

With open access to thought leaders and major industry players you’ll get exposure to leading edge technologies which will enable you to advance your skills.

What You’ll Do

• Perform a range of complex technical work activities in Azure Entra ID to meet business and customer requirements.
• Lead advanced troubleshooting and RCA (Root Cause Analysis) efforts to resolve issues efficiently, ensuring minimal downtime and high-quality service delivery.
• You will be responsible for the setup, configuration, and troubleshooting of enterprise applications in Azure. This includes implementing and supporting preconfigured enterprise applications and custom single sign-on (SSO) integrations, such as SAML and OpenID Connect.
• Define and enforce consent settings and access permissions for enterprise applications. Manage application registration lifecycles, including the configuration of API permissions to ensure seamless integration and security.
• Integrate custom and third-party applications with Azure Entra ID. Ensure secure certificate management and implement key rotation strategies to maintain the confidentiality and integrity of application secrets.
• Oversee the provisioning, deprovisioning, and lifecycle management of Azure accounts. Implement policies for the recovery of soft-deleted and hard-deleted accounts to maintain operational continuity.
• Enforce best practices for administrative accounts by implementing mandatory multi-factor authentication (MFA) and role-based access control (RBAC). Maintain and monitor break-glass accounts for emergency access, providing regular audits and compliance reports.
• Configure and maintain dynamic and static groups in Azure Entra ID. Monitor and manage group-based access and licensing assignments while troubleshooting group membership and access inconsistencies.
• Analyse licensing usage, resolve conflicts and discrepancies, and provide recommendations to optimize licensing across hybrid environments.
• Configure and manage Azure Entra ID Privileged Identity Management (PIM) for role-based access. Monitor privileged role activations and generate detailed reporting to enhance security and compliance.
• Implement conditional access policies to ensure adherence to least-privilege principles and enhance overall infrastructure security.
• Manage Microsoft Defender for Identity to monitor and protect against identity-related threats. Provide secure score insights and actionable recommendations for improvement.
• Document standard operating procedures (SOPs), troubleshooting steps, and best practices. Regularly update stakeholders on infrastructure health and recommend improvements.

What You’ll Need

• Experience: 5+ years of experience managing Azure environments with a focus on enterprise applications, identity management, and hybrid setups.
• Technical Expertise: Expertise in Azure Entra ID, including conditional access policies, PIM, and application registration. Hands-on experience with account sync tools like Azure Entra Connect.
• Access Management: Proficiency in managing Azure AD PIM, licensing optimization, and group configurations.
• Cloud & Security: Strong understanding of security practices, including MFA, RBAC, and conditional access. Familiarity with Microsoft Defender for Identity and secure score management.
• Scripting: Advanced skills in PowerShell scripting for automation, configuration management, and troubleshooting.
• Analytical & Problem-Solving: Strong analytical and technical troubleshooting skills, with a proactive approach to identifying and resolving complex technical challenges.
• Communication & Collaboration: Excellent verbal and written communication skills, with the ability to work effectively in a dynamic, team-oriented environment.
• Adaptability & Initiative: Flexible, quick to adapt to changes, and eager to take on additional duties and special projects as required.