Lead Entra Security Engineer

About this role

# Become a part of our caring community

• Selected candidate must reside within approximately 60 minutes driving distance from one of the following locations: (Louisville KY, NYC Metro, Dallas Metro, Charlotte NC Metro, South Florida(Tampa/Miami/Ft Lauderdale) , Washington DC metro, Chicago, Boston, Atlanta, Nashville)

The Lead Entra Security Engineer will drive both the architectural vision and hands-on engineering implementation of enterprise identity services across multiple Entra ID tenants. This role is responsible for designing and building modern identity controls across workforce, B2B, and application environments, while standardizing configurations and strengthening identity security posture.
The Lead Entra Security Engineer will partner closely with security, platform, and application teams to deliver secure-by-design identity solutions, modernize authentication and access controls, and enable scalable identity patterns aligned to Zero Trust principles. This role requires deep Entra expertise, strong engineering capability, and the ability to translate complex identity challenges into practical, enforceable solutions.

Key Responsibilities

• Engineer, implement, and help design identity controls across multiple Entra tenants, including Conditional Access, MFA, Identity Protection, and governance capabilities
• Implement and standardize cross-tenant access patterns, partnering on design decisions for B2B collaboration, Multi-Tenant Organizations (MTO), and external identity controls
• Lead implementation of Privileged Identity Management (PIM), access reviews, and least privilege access models
• Engineer and optimize authentication and SSO integrations (SAML, OAuth, OIDC) across SaaS and enterprise applications
• Execute tenant standardization efforts, ensuring consistent policies, authentication methods, and governance controls
• Troubleshoot and resolve complex authentication, authorization, and provisioning issues
• Develop automation using ...