Role - Identity Protection Engineer Microsoft Entra ID / CrowdStrike Identity Protection / AWS IAM Identity Centre

Work Location- Bangalore - Work from office - 5 Days

Role Summary

Strengthen protection of workforce and privileged identities in Microsoft Entra ID through risk-based Conditional Access, phishing-resistant authentication, Conditional Access session controls, Token Protection, and continuous access evaluation. Use native platform capabilities and automation to cut standing risk and manual effort.

Key Responsibilities

- Design and tune Conditional Access policies, including risk-based user and sign-in policies, authentication strengths, and device-based controls.
- Drive adoption of phishing-resistant MFA and passwordless authentication, especially for privileged users.
- Reduce standing privilege using Microsoft Entra Privileged Identity Management (PIM) for just-in-time role activation, and least-privilege admin role design.
- Harden the tenant: legacy authentication, user consent settings, guest access, and emergency access (break-glass) accounts.
- Onboard applications to Microsoft Entra ID and protect access by Conditional Access policies
- Provisioning, JML and Identity governance using Entra ID
- Evaluate and run POCs on Entra protection capabilities,



including preview features, and recommend what to adopt.
- Automation using Microsoft Graph and PowerShell to minimise manual operations.
- Work with the CrowdStrike resource to align identity risk signals and response actions across on-premises AD and Entra ID.

Required Skills >> Microsoft Entra ID / CrowdStrike Identity Protection / AWS IAM Identity Centre

- 7 10 years of IAM or identity security experience.
- Hands-on experience with Microsoft Entra ID Conditional Access, ID Protection, authentication methods, and PIM.
- Sound understanding of SAML, OAuth 2.0, OpenID Connect, SCIM, tokens, and session management.
- Working knowledge of hybrid identity (AD, Entra Connect or Cloud Sync).
- Automation experience with PowerShell and Microsoft Graph API.
- Familiarity with common identity attacks such as token theft, MFA fatigue, and adversary-in-the-middle phishing.

Preferred Skills

- Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent certification.
- Familiarity of AWS access governance using Entra ID and AWS IAM Identity Centre
- Exposure to CrowdStrike or another ITDR platform.
- BeyondTrust Passwordsafe

📌 Identity Protection Engineer (Microsoft Entra ID) (Bengaluru)
🏢 Cyberidentitysolutions
📍 Bengaluru