Senior Authentication Engineer – Entra

Posted 2 days ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Senior Authentication Engineer securing NBCUniversal’s media and entertainment platforms with Microsoft Entra. Designing resilient SSO, MFA, passwordless, and federation services across enterprise environments.

Responsibilities

  • Design, implement, and manage enterprise authentication services, including SSO, MFA, passwordless authentication, adaptive authentication, and federation services
  • Administer and support Microsoft Entra ID authentication services and related identity platforms
  • Lead deployment and adoption of FIDO2 security keys, Windows Hello for Business, passkeys, certificate-based authentication, and passwordless solutions
  • Develop and maintain authentication standards, reference architectures, procedures, and operational runbooks
  • Implement authentication controls aligned with Zero Trust principles
  • Investigate authentication-related security incidents with Cyber Defense teams
  • Analyze authentication telemetry, identify suspicious sign-in activity, and recommend mitigation strategies
  • Evaluate and implement authentication technologies, security enhancements, and industry best practices
  • Ensure high availability, resiliency, disaster recovery readiness, and operational excellence of authentication platforms
  • Monitor service health, performance, capacity, and adoption metrics
  • Lead root cause analysis and problem management for outages and incidents
  • Drive automation initiatives to improve operational efficiency and service quality
  • Design and support authentication integrations for SaaS, cloud-native, on-premises, custom, and third-party applications
  • Collaborate with application teams to onboard applications using SAML, OAuth 2.0, OIDC, WS-Federation, and SCIM
  • Contribute to authentication roadmaps and modernization initiatives
  • Identify opportunities to eliminate legacy authentication methods and adopt secure alternatives
  • Develop technical documentation, architecture diagrams, and implementation guidance
  • Partner with IAM, Cyber Security, Infrastructure, Application Development, and Workplace Technology teams

Requirements

  • 5+ years of experience at the Engineer level implementing enterprise access management solutions
  • 3+ years of hands-on experience with Microsoft Entra ID authentication services
  • Bachelor’s or Master’s degree in computer science, information security, a related field, or equivalent work experience
  • Understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, WS-Federation, and LDAP
  • Experience with Microsoft Entra ID, Active Directory, MFA technologies, federation services, Conditional Access, Identity Protection, and Privileged Identity Management
  • Experience implementing and supporting passwordless authentication solutions
  • Understanding of cloud security and Zero Trust architecture principles
  • Working knowledge of SIEM tools such as Splunk, including running reports and configuring alerts
  • Ability to interpret complex designs and explain them at an executive level
  • Knowledge of DNS, TLS/SSL, certificates, proxies, and load balancing
  • 2+ years of experience with scripting languages such as PowerShell or Python
  • Experience with Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS)
  • Experience with large-scale identity verification solutions for enterprises
  • One or more Azure or Microsoft Security certifications preferred, such as AZ-900, AI-900, AZ-500, SC-300, or AZ-305
  • Knowledge of integrating AI agents with identity providers and applying governance to access and lifecycle management
  • Ability to apply AI-driven analytics to identity governance, intelligent access decisions, anomalous behavior detection, and IAM workflow optimization
  • Strong troubleshooting, communication, and presentation skills
  • Ability to translate business requirements into secure and scalable technical solutions
  • Experience researching industry trends and best practices
  • Demonstrated ownership, accountability, customer-first mindset, cross-functional partnership, service reliability, operational excellence, automation, and data-driven decision-making

Benefits

  • Medical, dental and vision insurance
  • 401(k)
  • Paid leave
  • Tuition reimbursement
  • Variety of other discounts and perks
  • Fully remote work arrangement

Job title

Job type

Full Time

Experience level

Senior

Salary

$105,000 - $135,000 per year

Degree requirement

Bachelor's Degree

Tech skills

AWSAzureCloudCyber SecurityDNSGoogle Cloud PlatformPythonSplunk

Location requirements

RemoteCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.