Job description:

8+ Years of Technical IAM Domain experience with minimum 5 years of experience in Microsoft Azure Identity Platform.
Includes ability to delegate more routine tasks to other team members to support overall delivery, plus ability to work closely with the Business Analyst on process design.
Responsibilities :
Design, deploy, configure, and administer Azure Active Directory services to meet the organization's requirements.
Develop and enforce security policies, multi-factor authentication (MFA), and conditional access policies within Azure AD.
Monitor Azure AD services, investigate and resolve any issues related to user authentication, access permissions, and directory synchronization.
Perform regular security assessments and identifying and mitigating any vulnerabilities or risks.
Collaborate with IT teams to integrate Azure AD with other systems, applications, and identity providers.
Provide technical guidance and support to end-users, troubleshooting any Azure AD-related issues and incidents.
Stay up-to-date with the latest Azure AD features, security best practices, and industry trends, and make recommendations for improvements.
Document Azure AD configurations, processes, and procedures, ensuring that knowledge is effectively shared within the team.
Mandatory Requirements:
Good experience in designing, implementing, and managing Azure Active Directory services.
Strong experience of Azure AD security features, including Conditional Access, Identity protection (User risk and sign in risk policies and investigation & remediation of risky users) and MFA(Multifactor Authentication)
Good Understanding of Threat Handling
o Identification
Identify Attack Patterns
Identify false positives
o Prevention
Perform pro-active & reactive measures in response to Incidents/Threats
Understanding of On-prem active directory
Understanding of authentication protocols (e.g., OAuth, OpenID Connect, SAML) and knowledge across Azure AD SSO on-boarding(SAML, OAuth/OIDC)
Understanding of Azure AD Connect and directory synchronization.
Good knowledge of PowerShell scripting for Azure AD automation and management.
Strong problem-solving skills and the ability to troubleshoot and resolve complex Azure AD issues.
Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.

Desirable:
Troubleshooting and reporting via Azure AD sign in logs required. Log analytics/Azure Monitor querying experience desirable.
Graph API basic knowledge and overview will be a bonus, experience with any similar management API could also be considered.
Participate in deep- dive discussions/workshops with Microsoft Product Groups
o Eg. Azure Identity Protection deep-dive and feedback session
Testing
Testing of new Microsoft features and private preview feedback when applicable
o One time passcode for B2B users
o SSPR/MFA Converged Registration Experience
o SSPR Reporting

• To clearly understand the client's cybersecurity environment and respective product.
• To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools
• To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCAordata or logs collection
• To enable knowledge transferortrainings through creationor maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team.
• To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests and recommendations on cybersecurity policy changes.
• To implement changes, monitor security device performance and implements performance tuning when necessary.
• To prepare analyses and reports