Azure AD Expert with Entra ID

Azure AD Expert with Entra IDAbout the OfferWe are currently looking for a Senior Azure AD Expert with Entra ID to join the team of our client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.The client's AD team needs additional support to implement changes to tenants, subscriptions and Conditional Access (CA) policies in order to incorporate NLP as a resource domain within the client environment. The goal is to let NLP grant client accounts the permissions needed to access NLP resources (applications and other access-controlled resources). This will reduce certain AVD requirements and simplify both user management (no separate NLP accounts) and the user experience, with users primarily working from client-provided laptops.You will work alongside the existing NLP Azure Consultant, providing design and implementation support for cross-tenant configurations, management groups, subscriptions and Conditional Access policies.Key Details:Rate: up to 170 PLN/h (B2B)Work Model: Hybrid, 3 days per week from the office, full-time (40h/week)Location: Gdańsk / Gdynia (preferred) or WarsawRequired Expertise and Experience:Microsoft Entra ID & Cross-Tenant GovernanceCross-Tenant Access Settings: expert-level knowledge of configuring B2B collaboration, B2B direct connect and trust settings (including MFA and compliant device claims) across separate corporate tenantsExternal Identities: in-depth understanding of external user management, guest accounts and the cross-tenant synchronisation lifecycleIdentity Governance & Lifecycle Management: experience implementing Microsoft Entra ID Governance, entitlement management, access packages and Privileged Identity Management (PIM) for external partnersCloud Infrastructure & Microsoft Azure ArchitectureAzure RBAC: proven expertise in designing management groups, custom RBAC roles and subscription-level permissions in multi-tenant environmentsEnterprise Architecture: experience aligning IT infrastructure across two distinct enterprise environments while maintaining clear security boundaries and preventing permission overlapsDevice Management Integration: understanding of endpoint management and cross-tenant device compliance validation, including configuring tenant trust to recognise compliant devices managed by the clientAzure Virtual Desktop (AVD)Strong experience with AVD deployments, session hosts and the architectural considerations required to safely reduce or eliminate AVD dependenciesLanguageFluent EnglishNice to Have:Stakeholder management: ability to bridge communication gaps between separate technical teams (AD team, NLP team and endpoint management team)Technical writing: drafting technical designs, migration plans and final runbooks