Entra ID and Azure Cloud automation Engineer

Greetings from TCS!!

Role: Entra ID and Azure Cloud automation Engineer

Experience: 7 TO 15 years

Location: Gurgoan

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

Entra ID Administration, App onboarding, Professional Etiquette

SN

Technical/Functional Skills

1

Entra ID (Azure AD) Administration: Managing users, groups, roles, and access policies in Microsoft Entra ID.

2

Identity Lifecycle Management: Handling provisioning, de-provisioning, and access reviews.

3

Configuring and troubleshooting MFA policies and user issues.

4

Supporting SSO integrations using SAML, OAuth, OpenID Connect, and ADFS.

5

Designing and troubleshooting access control based on user/device/location.

6

Privileged Identity Management (PIM) – Managing just-in-time access for privileged roles.

7

PowerShell Scripting – Automating IAM tasks and troubleshooting using PowerShell.

8

Handling escalated IAM-related incidents and performing root cause analysis.

9

Generating reports for access logs, policy changes, and compliance checks.

10

Deep understanding of Active Directory, LDAP, and Azure AD Connect.

11

Familiarity with SAML, OAuth, Kerberos, and other IAM protocols.

12

Ensuring adherence to IAM policies and standards.

13

Participating in change control processes for IAM systems.

14

Clear communication with internal teams and maintaining support documentation.

Roles and Responsibilities

L2 Support Roles and Responsibilities

Operational & Administrative Tasks

• Add/Remove Roles: Assign built-in or custom roles to users/groups as per access requests.
• Ensure PIM Activation: Validate that Privileged Identity Management is enabled for eligible roles.
• Group Management:

- Create and manage security and Microsoft 365 groups.

- Assign access to resources via group membership.

• Access Management:

- Grant/revoke access to groups and enterprise apps based on approved requests.

- Monitor access reviews and escalate anomalies.

• Device Lifecycle Management:

- Monitor device registration and compliance status.

- Perform basic troubleshooting for device join issues (Azure AD Join/Hybrid Join).

• Conditional Access & MFA:

- Apply predefined Conditional Access policies.

- Enable/disable MFA for users.

• Enterprise App Registration:

- Register applications on Entra ID.

- Assign users/groups to apps for SSO.

• App Onboarding (SSO):

- Handle application onboarding using different authentication and authorization protocols requests via ServiceNow or email.

Support & Troubleshooting

• Respond to incidents related to access issues, MFA failures, group membership errors, etc.

L3 Support Roles and Responsibilities

Advanced Configuration & Design

• Privileged Identity Management (PIM):

- Design and implement PIM policies.

- Review audit logs and configure approval workflows.

• Group Strategy:

- Design dynamic group rules.

- Implement naming conventions and lifecycle policies.