We are seeking a technically proficient and detail-oriented Entra ID Azure Engineer to join our Entra and Azure team. This role is primarily focused on identity and access management (IAM), with responsibilities across Microsoft Entra ID configurations, Single Sign-On (SSO) integrations, Enterprise Application support, and App Registration lifecycle management.

The ideal candidate will have a strong understanding of Microsoft Entra and Azure services, authentication protocols, and a desire to advance their expertise in cloud identity and application security.

Key Responsibilities:

Create, configure, and maintain App Registrations, including API permissions, client secrets, and certificate management.

Ensure applications comply with IAM policies and remove outdated or unused objects.

Identify application owners when documentation is incomplete.

Troubleshoot authentication and access issues, collaborating with internal teams and external vendors.

Support and maintain SSO integrations using SAML 2.0, OpenID Connect (OIDC), and WS-Federation (WS-Fed).

Administer and configure Enterprise Applications in Entra, including role assignments and Conditional Access policies.

Monitor and analyze Entra audit logs for anomalies and configuration issues.

Maintain documentation for SSO integration procedures and App Registration standards.

Participate in access reviews and contribute to identity governance initiatives.

Stay updated with Microsoft Entra roadmap changes, new features, and security updates.

Required Qualifications:

Strong knowledge of Microsoft Entra ID and Azure platform fundamentals.

Experience with authentication protocols: SAML 2.0, OpenID Connect, OAuth 2.0.

Hands-on experience with App Registrations, Enterprise Applications, and Conditional Access policies.

Proficiency with the Azure Portal and Microsoft 365 admin tools.

Ability to interpret JSON, logs, and technical documentation.

Experience with PowerShell scripting and Microsoft Graph API for automation.

Understanding of security certificates, client secrets, and token-based authentication flows.

Excellent troubleshooting and communication skills.

Proven ability to resolve technical issues and support end users effectively.

Willingness to attend offshore, onsite, and client meetings as needed.

Flexible to work during overlap hours up to 10:30 PM IST, as per business requirements.

Preferred Qualifications:

Prior experience with cloud-based SSO integrations.

Familiarity with Zero Trust architecture and identity governance frameworks.

Microsoft certifications: SC-300, SC-400, SC-200, AZ-104 (or in progress).

Experience with Terraform and Infrastructure as Code (IaC).

Soft Skills:

Customer-focused with strong problem-solving abilities.

Well-organized with disciplined documentation practices.

Adaptable and eager to learn in a fast-paced, evolving environment.

Strong collaboration skills across teams (security, development, and support).

Additional Notes:

Healthcare domain experience is an added advantage.

Candidates must align with UST’s core values: humility, humanity, and integrity.