IAM Entra ID Engineer

Swordservices is seeking a Mid-level IAM Entra ID Engineer in Geneva, CH, to lead the transition from legacy identity systems to Microsoft Entra ID within a Zero Trust security model.

This position supports the company's modern cloud transformation by evolving identity and access management practices. The engineer will be responsible for migrating from on-premises Active Directory and legacy systems to Microsoft Entra ID, ensuring alignment with a Zero Trust security framework.

Responsibilities

• Design, deploy, and oversee core Microsoft Entra ID functionalities, including Conditional Access, Multi-Factor Authentication (MFA), passwordless sign-in, and Windows Hello for Business.
• Drive the migration from on-premises Active Directory to Microsoft Entra ID as the primary identity provider.
• Facilitate the shift of identity services from legacy platforms (such as MIM) to cloud-native solutions, streamlining Joiner-Mover-Leader processes.
• Set up and manage advanced security features like Privileged Identity Management (PIM) and identity protection tools.
• Establish monitoring, logging, and alerting systems to identify and address security threats promptly.
• Resolve incidents and service requests in collaboration with cross-functional teams to maintain service reliability.
• Create and maintain comprehensive technical documentation, covering configuration standards and deployment procedures.
• Partner with architects and security teams to ensure IAM solutions align with overarching business and security objectives.

Requirements

• A degree in Computer Science, Information Technology, or equivalent professional experience.
• 3 to 5 years of practical experience in identity and access management, with deep expertise in Microsoft Entra ID (Azure AD).
• Strong knowledge of authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, and JWT.
• Proficiency in scripting and automation using PowerShell, Terraform, and Ansible, along with experience using the Microsoft Graph API.
• Familiarity with identity governance tools, such as access reviews, entitlement management, and lifecycle workflows.
• Experience applying Infrastructure as Code (IaC) for IAM configuration management.
• Understanding of cloud security principles and best practices for identity protection.

Nice to have

• Familiarity with Agile methodologies, such as SAFe or similar frameworks, is a plus.