Azure AD Expert with Entra ID

About the Offer

We are currently looking for a Senior Azure AD Expert with Entra ID to join the team of our client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

The client's AD team needs additional support to implement changes to tenants, subscriptions and Conditional Access (CA) policies in order to incorporate NLP as a resource domain within the client environment. The goal is to let NLP grant client accounts the permissions needed to access NLP resources (applications and other access-controlled resources). This will reduce certain AVD requirements and simplify both user management (no separate NLP accounts) and the user experience, with users primarily working from client-provided laptops.

You will work alongside the existing NLP Azure Consultant, providing design and implementation support for cross-tenant configurations, management groups, subscriptions and Conditional Access policies.

Key Details:

Rate: up to 170 PLN/h (B2B)
Work Model: Hybrid, 3 days per week from the office, full-time (40h/week)
Location: Gdańsk / Gdynia (preferred) or Warsaw

Required Expertise and Experience:

Microsoft Entra ID & Cross-Tenant Governance

Cross-Tenant Access Settings: expert-level knowledge of configuring B2B collaboration, B2B direct connect and trust settings (including MFA and compliant device claims) across separate corporate tenants
External Identities: in-depth understanding of external user management, guest accounts and the cross-tenant synchronisation lifecycle
Identity Governance & Lifecycle Management: experience implementing Microsoft Entra ID Governance, entitlement management, access packages and Privileged Identity Management (PIM) for external partners

Cloud Infrastructure & Microsoft Azure Architecture

Azure RBAC: proven expertise in designing management groups, custom RBAC roles and subscription-level permissions in multi-tenant environments
Enterprise Architecture: experience aligning IT infrastructure across two distinct enterprise environments while maintaining clear security boundaries and preventing permission overlaps
Device Management Integration: understanding of endpoint management and cross-tenant device compliance validation, including configuring tenant trust to recognise compliant devices managed by the client

Azure Virtual Desktop (AVD)

Strong experience with AVD deployments, session hosts and the architectural considerations required to safely reduce or eliminate AVD dependencies

Language

Fluent English

Nice to Have:

Stakeholder management: ability to bridge communication gaps between separate technical teams (AD team, NLP team and endpoint management team)
Technical writing: drafting technical designs, migration plans and final runbooks

Learn more about this Employer on their Career Site