Assoc Prin Cloud Eng

What success looks like in this role:

Job description

We are seeking an experienced Senior Azure Entra & Active Directory Engineer to manage and optimize enterprise identity and access management (IAM) solutions. This role requires deep expertise in Microsoft Entra ID (formerly Azure AD), Active Directory (AD), and related security technologies. The ideal candidate will design, implement, and maintain identity services that ensure high availability, security, and compliance for the organization's cloud and hybrid environments.

Key Responsibilities:

Design, implement, and maintain Microsoft Entra ID (Azure AD) and on-premises Active Directory infrastructure.

Develop and enforce security policies, ensuring compliance with industry standards and best practices.

Manage and optimize Identity and Access Management (IAM) solutions, including SSO (Single Sign-On), MFA (Multi-Factor Authentication), Conditional Access, and Privileged Identity Management (PIM).

Administer and troubleshoot AD Federation Services (ADFS), Azure AD Connect, Group Policy (GPO), and DNS.

Automate identity lifecycle management using PowerShell, Terraform, or other scripting languages.

Integrate identity solutions with Azure, Microsoft 365, and third-party SaaS applications.

Monitor and respond to security threats using Microsoft Defender, Azure Sentinel, and other security tools.

Perform regular AD health checks, performance tuning, and patch management.

Collaborate with security, cloud, and networking teams to improve IAM strategies.

Lead migrations, upgrades, and modernization efforts, including Active Directory domain consolidations and hybrid identity implementations.

Provide technical mentorship and training to junior engineers.

Document system designs, processes, and best practices.

VMware
* In-depth knowledge and experience on VMware ESX and ESXi (6.5 and above) hypervisors installation and administration.
* In depth troubleshooting skills in VCenter, ESX and ESXi hosts, Networking and storage.
* Capacity planning skill for virtual hosts and VMs.
* Experience on planning, deploying and maintain VMware vSphere environments.
* Experience in consolidation and upgrade.
* VM deployment skills form Templates and OVA/OVF.
* P2V and V2V conversion skills
* Good knowledge on VMware integrated backup and restore solutions.

Windows
* In-depth knowledge and experience on Windows server operating systems (Windows 2019,2016,2012) management and administration.
* High-level trouble shooting skill required on OS related issues, which include memory dump analysis skills and performance tuning.
* Good knowledge on Microsoft clustering and NLB services.
* Experience on designing Server infrastructure.
* Good knowledge on storage and networking which help to design server.
* Good control on windows command line tools and power shell/VB scripting.
* Working experience on Windows infrastructure services like FTP, Telnet, DNS and DHCP etc…
* Good knowledge on Microsoft licensing for Servers, Terminal services

#L1-BN1

You will be successful in this role if you have:

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).

8+ years of experience in Active Directory, Azure AD (Entra ID), and IAM technologies.

Strong expertise in Azure AD B2B/B2C, Conditional Access, and RBAC (Role-Based Access Control).

Hands-on experience with Windows Server, DNS, DHCP, and AD Group Policy.

Experience with PowerShell scripting and automation.

Knowledge of Zero Trust security models and modern authentication protocols (OAuth, SAML, OpenID Connect).

Experience with Azure AD Connect, ADFS, and Hybrid Identity.

Strong troubleshooting skills in identity federation, authentication, and authorization issues.

Familiarity with Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Azure PIM.

Excellent communication and documentation skills.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.