Responsibilities
- Lead the transition of devices to Microsoft Entra ID, handling both cloud-only and hybrid join configurations.
- Organize and carry out phased migrations of devices from on-premises Active Directory to Entra ID with minimal user impact.
- Create detailed migration procedures, rollback strategies, validation steps, and success benchmarks for each phase.
- Collaborate with endpoint, IT, and security teams to prepare devices and align Conditional Access and compliance policies before migration.
- Diagnose and resolve issues related to device registration, enrollment, and Conditional Access during migration.
- Monitor migration progress, analyze adoption data, and refine migration methods iteratively.
- Deliver advanced administration and operational support for the Microsoft Entra ID platform.
- Configure and maintain Conditional Access rules, Identity Protection, SSO, app registrations, and enterprise applications.
- Support hybrid identity setups using Microsoft Entra Connect to ensure consistent synchronization between on-prem AD and Entra ID.
- Serve as the primary technical contact for Entra ID incidents, identifying root causes and deploying long-term fixes.
- Automate administrative, reporting, and provisioning tasks in Entra ID using PowerShell and Microsoft Graph.
- Keep operational documentation, runbooks, and procedures updated for the Entra ID environment.
- Manage and administer multi-factor authentication systems, including Duo MFA and Windows Hello for Business.
- Enforce organization-wide MFA policies and ensure compatibility with applications and infrastructure.
- Monitor MFA system performance, resolve authentication issues, and handle escalated incidents.
- Support security configuration in Intune, including Conditional Access, compliance policies, and role-based access controls.
- Work with IT teams to enforce compliance of mobile devices with security and access policies.
- Provide Active Directory support, managing user accounts, group policies, and organizational units.
- Maintain hybrid identity integration between on-premises AD and Entra ID using Entra Connect.
- Troubleshoot and fix authentication and access provisioning problems across AD and Entra ID.
- Continuously assess and enhance IAM processes for Entra ID, device migration, MFA, and AD to improve security and usability.
- Automate repetitive identity management tasks to increase efficiency and reduce human error.
- Act as the escalation point for technical issues involving Entra ID, device migration, Duo MFA, and related IAM technologies.
- Investigate, diagnose, and resolve identity and access issues in coordination with other teams.
- Ensure all IAM solutions comply with regulatory standards such as SOX.
