Microsoft Entra ID / WAM Operations Engineer
Job Details
Hiring Process
Time to Answer
2 open days
Process
1 Phone Call
1 Onsite Interview
Days to get an Offer
4 Days after Interview
Overview
Microsoft Entra ID / WAM Operations Engineer with 7+ years of cybersecurity and IAM experience. Skilled in Entra Identity Management, SSO, authentication flows, Conditional Access, provisioning, monitoring, PowerShell/Graph automation, and ITSM/Agile operations.
Job Responsibilities
- Operate Microsoft Entra ID for BAU activities.
- Manage SSO-enabled enterprise applications, app registrations, and related identity configurations in production.
- Handle incidents and requests through ITSM tools (ServiceNow, Jira, or similar): triage, troubleshoot, resolve, document, and communicate updates to stakeholders.
- Troubleshoot end-to-end authentication flows, including SAML and OIDC/OAuth2 sign-in errors, token issues, claims/attributes, redirect URIs, and federation metadata problems.
- Perform SAML certificate renewal and rotation activities: plan and execute changes, coordinate with application owners, validate post-change sign-in, and ensure minimal disruption.
- Rotate OIDC client secrets and/or certificates for app registrations and maintain secure storage, handling procedures, and evidence of rotation.
- Monitor Entra ID health and SSO performance using platform logs and dashboards (sign-in logs, audit logs, application logs) to identify trends and recurring issues.
- Maintain and follow operational runbooks, SOPs, and knowledge base articles to ensure accurate documentation for common incidents and recurring tasks.
- Support the onboarding of new applications for SSO (primarily SAML/OIDC): gather requirements, configure standard patterns, test with application teams, and hand over to support.
-
Apply security best practices during operations (least privilege, break-glass awareness, MFA hygiene, and controlled change execution) aligned with Zero Trust principles.
Must Have Skills
- Minimum 7 years in IAM/WAM operations with strong hands-on experience operating Microsoft Entra ID in production.
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- Strong understanding of modern SSO and federation: SAML 2.0, OIDC/OAuth2, token/claim concepts, and common vendor integration patterns.
- Operational excellence in incident management, change management, problem management, and stakeholder communications in a live service environment.
- Familiarity with identity and access troubleshooting techniques: log analysis, correlation of sign-in events, replaying flows, and isolating root causes.
-
Basic automation and scripting skills, including PowerShell and Microsoft Graph (or REST APIs) for reporting, bulk operations, and repeatable runbook tasks.
- Strong written communication and documentation skills.
- Ability to produce concise runbooks, knowledge base articles, and post-incident summaries.
- Ability to collaborate effectively within ITIL/ITSM environments and Agile/Scrum ways of working.
- Ability to participate in on-call or shift rotations, if required.
- Fluency in English is required.
Nice to have
- Fluency in French and/or Dutch is an advantage.
- Relevant Microsoft and IT certifications (preferred): SC-300 – Microsoft Identity and Access Administrator; AZ-104 – Azure Administrator and/or MS-102 – Microsoft 365 Administrator; ITIL Foundation (or equivalent ITSM certification).
- Knowledge of legacy authentication concepts (LDAP, Kerberos, NTLM) as they relate to troubleshooting access issues.
- Understanding of identity governance and administration basics (access packages, entitlement assignments) from a support perspective.
- Exposure to certificate management processes and PKI fundamentals (expiration management, chain validation, PEM/PFX handling).
- Experience with reporting and analytics using KQL/SQL for operational insights and service improvements.
- General Azure fundamentals (RBAC, subscriptions, networking basics) that support troubleshooting and escalation.
- Experience operating Conditional Access policies and authentication methods from an operational perspective, including policy impact assessment, troubleshooting user impact, and implementing controlled changes following CAB/change processes.
- Experience supporting provisioning and lifecycle integrations (SCIM, inbound/outbound provisioning, group-based assignment) and troubleshooting related failures.
- Hands-on experience with monitoring and alerting integrations (Microsoft Sentinel, Log Analytics/KQL, Azure Monitor) for identity signals and automated triage.
- Experience operating directory synchronization (Entra Connect / Cloud Sync) from a monitoring and incident-response perspective, including health checks, error triage, and escalation.
- Ability to contribute to service improvements, including problem management (RCA), trend analysis, and proposing preventative controls for recurring incidents.
What's great in the job?
- Great team of smart people, in a friendly and open culture
- Expand your knowledge of various business industries
- Create content that will help our users on a daily basis
- Real responsibilities and challenges in a fast evolving company
Travailler chez yechte
Nous sommes un cabinet de conseil numérique indépendant avec des objectifs ambitieux et une présence mondiale. Nous accompagnons un large éventail d'entreprises, en constituant des équipes numériques et en fournissant des solutions numériques innovantes. Notre personnel multiculturel et diversifié, composé de « citoyens du monde », reflète cette inclusivité.
Nous accordons une grande importance à l'équilibre entre vie professionnelle et vie privée et nous nous efforçons de répondre aux attentes d'une équipe en pleine croissance, en investissant dans les personnes, car elles constituent notre plus grand atout. Notre croissance constante témoigne de cet engagement.
Venez travailler chez yechte, une entreprise en pleine expansion qui offre d'excellents avantages sociaux, des opportunités de développement personnel et la possibilité d'apprendre auprès de leaders accomplis. Nous sommes toujours à la recherche de professionnels exceptionnels pour rejoindre notre équipe.
Ce que nous offrons
Chaque employé a la possibilité de voir l'impact de son travail. Vous travaillez sur de véritables projets numériques et apportez une contribution tangible à l'entreprise. Nous voulons offrir à chacun la possibilité de s'épanouir sur le plan personnel, professionnel et social.
Flexibilité
Votre bien-être nous tient à cœur. Chez yechte, nous proposons des horaires flexibles et des modalités de travail hybrides à domicile/au bureau, améliorant ainsi l'équilibre entre vie professionnelle et vie privée et la productivité des employés.
Avantages attractifs
Votre confort nous tient à cœur. Chez yechte, nous proposons des plans de mobilité économiques et écologiques, des indemnités alimentaires et une couverture santé complète, afin d'améliorer la satisfaction de nos employés.
Développement personnel
Votre épanouissement nous tient à cœur. Chez yechte, nous vous proposons de stimuler votre développement personnel grâce à des formations et des certifications informatiques sur mesure, favorisant une culture d'agilité et d'expertise technologique.
