Role - Identity Protection Engineer Microsoft Entra ID / CrowdStrike Identity Protection / AWS IAM Identity Centre

Work Location- Bangalore - Work from office - 5 Days

Role Summary

Strengthen protection of workforce and privileged identities in Microsoft Entra ID through risk-based Conditional Access, phishing-resistant authentication, Conditional Access session controls, Token Protection, and continuous access evaluation. Use native platform capabilities and automation to cut standing risk and manual effort.

Key Responsibilities
Design and tune Conditional Access policies, including risk-based user and sign-in policies, authentication strengths, and device-based controls.
Drive adoption of phishing-resistant MFA and passwordless authentication, especially for privileged users.
Reduce standing privilege using Microsoft Entra Privileged Identity Management (PIM) for just-in-time role activation, and least-privilege admin role design.
Harden the tenant: legacy authentication, user consent settings, guest access, and emergency access (break-glass) accounts.
Onboard applications to Microsoft Entra ID and protect access by Conditional Access policies
Provisioning, JML and Identity governance using Entra ID
Evaluate and run POCs on Entra protection capabilities,



including preview features, and recommend what to adopt.
Automation using Microsoft Graph and PowerShell to minimise manual operations.
Work with the CrowdStrike resource to align identity risk signals and response actions across on-premises AD and Entra ID.

Required Skills >> Microsoft Entra ID / CrowdStrike Identity Protection / AWS IAM Identity Centre
7 10 years of IAM or identity security experience.
Hands-on experience with Microsoft Entra ID Conditional Access, ID Protection, authentication methods, and PIM.
Sound understanding of SAML, OAuth 2.0, OpenID Connect, SCIM, tokens, and session management.
Working knowledge of hybrid identity (AD, Entra Connect or Cloud Sync).
Automation experience with PowerShell and Microsoft Graph API.
Familiarity with common identity attacks such as token theft, MFA fatigue, and adversary-in-the-middle phishing.

Preferred Skills
Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent certification.
Familiarity of AWS access governance using Entra ID and AWS IAM Identity Centre
Exposure to CrowdStrike or another ITDR platform.
BeyondTrust Passwordsafe

📌 Identity Protection Engineer Microsoft Entra Id Bengaluru
🏢 Cyberidentitysolutions
📍 Bengaluru