Azure AD Expert with Entra ID

Azure AD Expert with Entra ID

We are currently looking for a Senior Azure AD / Microsoft Entra ID Expert to join the team of our global client from the banking industry. You will support the AD team in a cross-tenant initiative: integrating a separate partner tenant as a resource domain, so that client accounts can securely access its applications and resources without separate accounts. The goal is to simplify user management and the user experience and to reduce Azure Virtual Desktop dependencies. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

• Rate: up to 170 PLN/h net (B2B)

• Work Model: hybrid, 3 days per week from the office, full-time (40 h/week)

• Location: Warsaw or Tricity (Gdańsk/Gdynia)

Responsibilities:

• Designing and implementing changes to tenants, subscriptions and Conditional Access policies to enable cross-tenant access

• Configuring cross-tenant access settings, B2B collaboration, B2B direct connect and trust settings (MFA and compliant device claims)

• Setting up permissions for client accounts to access applications and other access-controlled resources in the partner tenant

• Designing management groups, custom RBAC roles and subscription-level permissions while keeping clear security boundaries

• Supporting the safe reduction of Azure Virtual Desktop dependencies

• Working closely with the partner's Azure consultant, the AD team and the endpoint management team

• Preparing technical designs, migration plans and runbooks

Requirements:

• Senior-level, hands-on experience with Microsoft Entra ID (Azure AD) in enterprise environments

• Expert knowledge of cross-tenant access settings: B2B collaboration, B2B direct connect, trust settings for MFA and compliant devices

• In-depth understanding of External Identities, guest accounts and the cross-tenant synchronization lifecycle

• Experience with Entra ID Governance: entitlement management, access packages and Privileged Identity Management (PIM) for external partners

• Proven expertise in Azure RBAC, management groups, custom roles and subscriptions in multi-tenant environments

• Strong experience designing and managing Conditional Access policies

• Experience aligning infrastructure across two separate enterprise environments while preventing permission overlaps

• Understanding of endpoint management and cross-tenant device compliance validation

• Strong experience with Azure Virtual Desktop deployments and session hosts

• Fluent English

Nice to have:

• Stakeholder management skills across separate technical teams

• Technical writing: technical designs, migration plans and runbooks

• Experience in banking or other regulated industries