Microsoft Entra ID / WAM Operations Engineer
Job Details
Hiring Process
Time to Answer
2 open days
Process
1 Phone Call
1 Onsite Interview
Days to get an Offer
4 Days after Interview
Overview
Microsoft Entra ID / WAM Operations Engineer with 7+ years of cybersecurity and IAM experience. Skilled in Entra Identity Management, SSO, authentication flows, Conditional Access, provisioning, monitoring, PowerShell/Graph automation, and ITSM/Agile operations.
Job Responsibilities
- Operate Microsoft Entra ID for BAU activities.
- Manage SSO-enabled enterprise applications, app registrations, and related identity configurations in production.
- Handle incidents and requests through ITSM tools (ServiceNow, Jira, or similar): triage, troubleshoot, resolve, document, and communicate updates to stakeholders.
- Troubleshoot end-to-end authentication flows, including SAML and OIDC/OAuth2 sign-in errors, token issues, claims/attributes, redirect URIs, and federation metadata problems.
- Perform SAML certificate renewal and rotation activities: plan and execute changes, coordinate with application owners, validate post-change sign-in, and ensure minimal disruption.
- Rotate OIDC client secrets and/or certificates for app registrations and maintain secure storage, handling procedures, and evidence of rotation.
- Monitor Entra ID health and SSO performance using platform logs and dashboards (sign-in logs, audit logs, application logs) to identify trends and recurring issues.
- Maintain and follow operational runbooks, SOPs, and knowledge base articles to ensure accurate documentation for common incidents and recurring tasks.
- Support the onboarding of new applications for SSO (primarily SAML/OIDC): gather requirements, configure standard patterns, test with application teams, and hand over to support.
-
Apply security best practices during operations (least privilege, break-glass awareness, MFA hygiene, and controlled change execution) aligned with Zero Trust principles.
Must Have Skills
- Minimum 7 years in IAM/WAM operations with strong hands-on experience operating Microsoft Entra ID in production.
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- Strong understanding of modern SSO and federation: SAML 2.0, OIDC/OAuth2, token/claim concepts, and common vendor integration patterns.
- Operational excellence in incident management, change management, problem management, and stakeholder communications in a live service environment.
- Familiarity with identity and access troubleshooting techniques: log analysis, correlation of sign-in events, replaying flows, and isolating root causes.
-
Basic automation and scripting skills, including PowerShell and Microsoft Graph (or REST APIs) for reporting, bulk operations, and repeatable runbook tasks.
- Strong written communication and documentation skills.
- Ability to produce concise runbooks, knowledge base articles, and post-incident summaries.
- Ability to collaborate effectively within ITIL/ITSM environments and Agile/Scrum ways of working.
- Ability to participate in on-call or shift rotations, if required.
- Fluency in English is required.
Nice to have
- Fluency in French and/or Dutch is an advantage.
- Relevant Microsoft and IT certifications (preferred): SC-300 – Microsoft Identity and Access Administrator; AZ-104 – Azure Administrator and/or MS-102 – Microsoft 365 Administrator; ITIL Foundation (or equivalent ITSM certification).
- Knowledge of legacy authentication concepts (LDAP, Kerberos, NTLM) as they relate to troubleshooting access issues.
- Understanding of identity governance and administration basics (access packages, entitlement assignments) from a support perspective.
- Exposure to certificate management processes and PKI fundamentals (expiration management, chain validation, PEM/PFX handling).
- Experience with reporting and analytics using KQL/SQL for operational insights and service improvements.
- General Azure fundamentals (RBAC, subscriptions, networking basics) that support troubleshooting and escalation.
- Experience operating Conditional Access policies and authentication methods from an operational perspective, including policy impact assessment, troubleshooting user impact, and implementing controlled changes following CAB/change processes.
- Experience supporting provisioning and lifecycle integrations (SCIM, inbound/outbound provisioning, group-based assignment) and troubleshooting related failures.
- Hands-on experience with monitoring and alerting integrations (Microsoft Sentinel, Log Analytics/KQL, Azure Monitor) for identity signals and automated triage.
- Experience operating directory synchronization (Entra Connect / Cloud Sync) from a monitoring and incident-response perspective, including health checks, error triage, and escalation.
- Ability to contribute to service improvements, including problem management (RCA), trend analysis, and proposing preventative controls for recurring incidents.
What's great in the job?
- Great team of smart people, in a friendly and open culture
- Expand your knowledge of various business industries
- Create content that will help our users on a daily basis
- Real responsibilities and challenges in a fast evolving company
Work at yechte
We are an independent digital consultancy with ambitious goals and a global presence. We support a diverse range of companies, building digital teams and delivering innovative digital solutions. Our multicultural and diverse workforce, comprised of ‘Global Citizens’, reflects this inclusivity.
We care about work-life balance and meeting the expectation of a growing team, investing in people because they are our greatest asset. Our consistent growth is a testament to this commitment.
Come work at yechte, a company on the rise, offering excellent benefits, opportunities for personal development, and the chance to learn from accomplished leaders. We are always looking for exceptional professionals to join our team.
What We Offer
Each employee has a chance to see the impact of his work. You work on real digital projects and make tangible contributions to the company. We want to provide to each individual personal, professional and social growth.
Flexibility
We care about your wellbeing. At yechte we offer flexi-hours and hybrid home/office work arrangements, enhancing employee work-life balance and productivity.
Attractive Benefits
We care about your comfort. At yechte we offer cost-effective and eco-friendly mobility plans, food allowances, and comprehensive healthcare support, enhancing employee satisfaction.
Personal Development
We care about your growth. At yechte we offer to boost your personal growth through tailored IT trainings and certifications, fostering a culture of agility and tech-driven expertise.
