Ms Entra Id-rbac,mfa,sso(Tesco)

Job title/role: MS Entra ID-RBAC,MFA,SSOExperience - 11 to 14 years

Location - Hyderabad, Bangalore, Pune.

About Zensar:
Zensar is a digital solutions company helping organizations around the world achieve new thresholds of business performance. We work with clients in banking and financial services, hi-tech and manufacturing, insurance, consumer services, and more. We prepare our clients for sustainable success through experience design, cloud technology, advanced analytics, and business acceleration.

**Responsibilities**:

- **Microsoft Entra ID Management**
- Design, implement, and manage the Microsoft Entra ID infrastructure
- Configure and maintain directory synchronization between on-premises Active Directory and Entra ID
- Manage user lifecycles, including provisioning, deprovisioning, and access reviews
- Implement and manage Entra ID Premium features
- **Role-Based Access Control (RBAC)**
- Design and implement RBAC policies aligned with organizational security requirements
- Create and manage custom roles to meet specific business needs
- Implement Privileged Identity Management (PIM) for just-in-time and time-bound role activation
- Conduct regular access reviews and maintain the principle of least privilege
- **Multi-Factor Authentication (MFA)**
- Design and implement MFA strategies across the organization
- Configure and manage various MFA methods (e.g., Microsoft Authenticator, SMS, phone call)
- Implement risk-based Conditional Access policies in conjunction with MFA
- Monitor and respond to MFA-related security events and user issues
- Develop and maintain MFA bypass processes for emergency scenarios
- **Single Sign-On (SSO)**
- Configure and maintain federation services (AD FS) if required
- Troubleshoot SSO-related issues and optimize the user experience
- **Security and Compliance**
- Implement and manage Conditional Access policies
- Configure and maintain Identity Protection features to detect and remediate identity risks
- Ensure compliance with relevant standards and regulations (e.g., GDPR, HIPAA)
- Conduct regular security assessments of the Entra ID environment
- Generate and analyze reports on identity and access-related security metrics
- **Monitoring and Troubleshooting**
- Set up and maintain monitoring for Entra ID services and related components
- Troubleshoot complex identity and access-related issues
- Analyze Entra ID logs and audit reports to identify potential security issues or areas for improvement
- Develop and maintain runbooks for common identity and access management scenarios
- **Integration and Automation**
- Integrate Entra ID with other security tools and SIEM systems
- Develop PowerShell scripts and utilize Graph API for identity management automation
- Implement and manage Identity Governance solutions
- **Continuous Improvement**
- Stay updated with the latest Microsoft Entra ID features, security best practices, and industry trends
- Evaluate and recommend new identity and access management technologies
- Contribute to the development of identity and access management strategies and roadmaps

**Requirements**:

- Bachelor's degree in Computer Science, Information Technology, or a related field
- 5+ years of experience in IT, with at least 3 years focused on identity and access management
- Strong experience with Microsoft Entra ID (Azure AD) and related technologies
- In-depth knowledge of RBAC, MFA, and SSO concepts and implementations
- Familiarity with on-premises Active Directory and hybrid identity scenarios
- Experience with PowerShell scripting and Microsoft Graph API
- Understanding of security protocols (e.g., SAML, OAuth, OpenID Connect)
- Excellent problem-solving and analytical skills
- Strong communication skills, both written and verbal
- Microsoft 365 Certified: Enterprise Administrator Expert certification requiredAdditional certifications (e.g., CISSP, CISM) are a plus

Relationships:
Maintaining a good relationship with our global IT teams is key to your success. In your role you will need to be able to communicate with people at all levels in the organization and work with several of our suppliers and partners.