[Hiring] Entra ID Customer Engineer @CNX

Role Description

We are looking for an Entra ID Customer Engineer to work directly with customer teams, providing expert advisory services across Microsoft identity technologies. In this role, you’ll use structured Microsoft Intellectual Property (MIP) and VBD engagements to build trusted relationships, guide customers through complex identity challenges, and help them achieve a secure, healthy, and well‑architected environment.

This is a hands‑on advisory position where you’ll influence strategy, lead technical conversations, and support customers through workshops, assessments, and solution guidance.

• Relevant MIP / VBD Engagements
• On-Demand Assessment – Entra ID
• WorkshopPLUS – Microsoft Azure: Hybrid Identity
• WorkshopPLUS – Microsoft Entra: Identity Fundamentals
• Activate Azure with Multi-Factor Authentication and Conditional Access
• Onboarding Accelerator – Migrate Single Sign-On Applications to Entra
• Onboarding Accelerator – Azure Active Directory: Features Deployment
• Onboarding Accelerator – Entra Permissions Management
• WorkshopPLUS – Microsoft 365 Security and Compliance Technical Update Briefing

Qualifications

• Entra ID & Identity Management
• RBAC, account and group management
• Service principals and enterprise application management
• Authentication models: Cloud Auth (PTA/PHS), federation
• Protocols: OAuth, SAML, OIDC, Kerberos, FIDO2/Passkeys
• Device & Directory Integration
• Hybrid Join, Azure AD Join
• Account synchronization: Entra ID Connect, Entra Cloud Sync
• Integration with Active Directory
• Security, Access & Governance
• Azure P1/P2 features
• Conditional Access, MFA, risk-based policies
• Reporting, troubleshooting
• SSPR, Entra Password Protection
• Policy configuration
• Entra ID Governance: PIM, periodic reviews, access reviews, compliance audits
• Entra ID Protection
• Architecture & Automation
• Advanced D365 CE enterprise architecture
• Integration with external systems
• Dataverse and multi-source data integration
• Power Automate solutions with internal logic and service connections
• Microsoft Graph API (foundational knowledge)

Requirements

• Optional Skills (Nice to Have)
• ADFS
• Active Directory Certificate Services
• Azure Monitor, Azure Sentinel
• Defender for Endpoint
• Broader Azure services
• Relevant Certifications
• Microsoft Certified: Identity and Access Administrator Associate (or equivalent)
• Microsoft Certified: Cybersecurity Architect Expert (or equivalent)
• Microsoft Certified Trainer (or equivalent)
• CISSP (or equivalent)

Location

UK, Work at Home, GB

Language Requirements

Not specified.

Time Type

Full time