<p><strong>ABOUT KALLES GROUP:</strong></p> <p>Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.</p> <p>While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.</p> <p>No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.</p> <p><strong>We believe the best way to show you what our team is like is to treat you like you're already a part of it</strong>. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.</p> <p> </p> <p><strong><span data-contrast="auto">WHAT YOU WILL DO:</span></strong><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}"> </span></p> <p data-start="1431" data-end="2050"></p> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <p>As a Senior Microsoft Entra ID Engineer, you’ll be on assignment with one of our enterprise clients, helping lead a large workforce identity migration. Authentication for thousands of applications, including many complex SAML integrations, is moving from a legacy identity provider to Microsoft Entra ID. You’ll own the design, build and operation of access management and identity governance in Entra, and you’ll have a lot of autonomy. Your work will include Conditional Access and authentication strategy (phishing-resistant MFA and passwordless), Privileged Identity Management, application SSO and provisioning, B2B access, and the full Entra ID Governance suite: entitlement management, access reviews and lifecycle workflows. You’ll make Entra-native governance work cleanly alongside SailPoint Identity Security Cloud and hybrid Active Directory, and you’ll automate with Microsoft Graph, PowerShell and Infrastructure as Code. You’ll also set engineering standards and mentor other engineers on the team.</p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <div> </div> <p data-start="1431" data-end="2050"></p> <p><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}"><strong>KEY RESPONSIBILITIES:</strong> </span></p> <p></p> <div class="ewa-rteLine">ACCESS MANAGEMENT (Entra ID)</div> <div class="ewa-rteLine">• Design and maintain Conditional Access architecture – persona/risk-based policies, device & location conditions, session controls, Authentication Strengths for phishing-resistant MFA.</div> <div class="ewa-rteLine">• Own authentication methods strategy and rollout – passwordless/FIDO2/passkeys, Windows Hello for Business, certificate-based auth; retire weaker methods.</div> <div class="ewa-rteLine">• Administer Privileged Identity Management (PIM) – eligible assignments, JIT activation, approvals, privileged role & PIM-for-groups reviews.</div> <div class="ewa-rteLine">• Manage application access – enterprise app SSO (SAML/OIDC), app role assignments, SCIM provisioning.</div> <div class="ewa-rteLine">• Design external identity / B2B controls – cross-tenant access settings, guest governance, partner access patterns.</div> <div class="ewa-rteLine"> </div> <div class="ewa-rteLine">IDENTITY GOVERNANCE (Entra ID Governance)</div> <div class="ewa-rteLine">• Build and operate Entitlement Management – access packages, catalogs, policies, approval/expiration workflows, separation-of-duties checks.</div> <div class="ewa-rteLine">• Design and run Access Reviews across groups, apps, privileged roles and guests, including recurring/automated reviews with auto-remediation.</div> <div class="ewa-rteLine">• Implement Lifecycle Workflows – HR-driven joiner/mover/leaver and scheduled governance tasks.</div> <div class="ewa-rteLine">• Configure HR-driven inbound provisioning and outbound SCIM app provisioning.</div> <div class="ewa-rteLine">• Integrate Entra-native governance with SailPoint ISC and hybrid AD, defining ownership boundaries and avoiding duplicate controls.</div> <div class="ewa-rteLine"> </div> <div class="ewa-rteLine">ACROSS THE ROLE</div> <div class="ewa-rteLine">• Automation and config-as-code (PowerShell, Microsoft Graph API / Graph PowerShell SDK, Terraform/Bicep).</div> <div class="ewa-rteLine">• Produce reference designs, standards and documentation; review other engineers' designs/configs.</div> <div class="ewa-rteLine">• Partner with SecOps so identity telemetry supports threat detection.</div> <div class="ewa-rteLine">• Mentor engineers; act as Entra access/governance SME. Use AI tooling to accelerate design and documentation.</div> <p><strong><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}">ABOUT YOU:</span></strong></p> <p><strong>Your values:</strong></p> <ul> <li> <ul> <li><strong>Integrity: </strong>You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.</li> <li><strong>Purposefulness: </strong>You have a desire to serve