Azure Entra ID Engineer

At Edelman Financial Engines, we believe everyone deserves to move their financial life forward. We know that assets have the power to fund goals. Those numbers represent individual lifetimes filled with hard work and dreams for our clients and generations to follow. Our clients trust us to guide them forward with empathy, integrity, and invention. We uphold that same standard of respect and commitment for clients and colleagues alike. Founded on the idea that financial education is a fundamental right for everyone—not just the wealthy, Edelman Financial Engines continues to grow and challenge the status quo. We're moving forward, together. If our purpose-driven commitment inspires you, we invite you to consider joining our team. As a Azure Entra ID Engineer on the Identity & Access Management Team, you'll play a critical role as an SME for both on-premises and cloud-based Microsoft identity platforms with design, deployment and day-to-day operational support experience. In addition to an earnest desire and passion to help people, the ideal candidate will complement the team's existing talents. For this role, we are looking for someone who has a creative spirit and fresh insights to help us continuously improve and accelerate our focus on innovation and first class integrations. If you have a 6+ years experience in identity management or equivalent technical experience, this may be an ideal match for you Responsibilities:

• Design, implement, and support both on-premises Active Directory and Azure AD services for SSO, multifactor authentication, Zero Trust, user access provisioning services, automation, integrations, and lifecycle management, collaborate with IT and product teams for SSO and user registration.
• Provision, configure & support resilient cloud deployment architecture, maintaining SOC2 compliance.
• Take the lead in managing and enhancing system scalability and capacity, ensuring service remains online and performing optimally. Be at the forefront of maintaining the balance between business necessities and product demands, by crafting and reviewing operation runbooks .
• Oversee SSO/identity services vendor platforms specifically for multiple SOC2 controlled environments, work with other Identity Platform engineers in deploying and maintaining services.
• Participate in periodic SOC2 audit processes.

Requirements:

• 6+ years of hands-on experience in designing, managing, implementing, and supporting Microsoft on-premises identity (AD/ADFS/Certificate Services), hybrid, cloud identity, and access technologies and solutions.
• Hands-on experience planning and deploying AAD Identity services including third-party identities, AAD licensing, conditional access policies, MFA, AAD Identity Protection, privileged identity, access management, identity governance administration and hybrid/cloud device management within a complex environment.
• Some experience with Okta, CyberArk, Cloud Access Security Broker services, etc.
• Must be an effective communicator, possess critical-thinking and problem-solving skills, can self-manage tasks, goals, commitments, and work well alone or as a member of the team.

About Edelman Financial Engines   Since 1986, Edelman Financial Engines has been committed to always acting in the best interests of our clients. We were founded on the belief that all investors – not just the wealthy – deserve access to personal, comprehensive financial planning and investment advice. Today, we are America's top independent financial planning and investment advisory firm, recognized by Barron's,1 with 145+ offices2 across the country and entrusted by more than 1.3 million clients to manage more than $242 billion in assets.3 Our unique approach to serving clients combines our advanced methodology and proprietary technology with the attention of a dedicated personal financial planner. Every client's situation and goals are unique, and the powerful fusion of high-tech and high-touch allows Edelman Financial Engines to deliver the personal plan and financial confidence that everyone deserves. For more information, please visit . Edelman Financial Engines, LLC. Edelman Financial Engines is a registered trademark of Edelman Financial Engines, LLC. All advisory services provided by Financial Engines Advisors L.L.C., a federally registered investment advisor. Results are not guaranteed. See for patent information. AM For California residents, please see the link for the Privacy Notice for Candidates. California law requires that we provide you this notice about the collection and use of your personal information. Please read it carefully. Edelman Financial Engines encourages success based on our individual merits and abilities without regard to race, color, religion, creed, sex, gender identity or expression, sexual orientation, pregnancy; marital, domestic partner or civil union status; national origin, citizenship, ancestry, ethnic heritage, genetic information, age, legally recognized disability, military service or veteran status.  Accommodations are modifications or adjustments to the hiring process that would enable you to fully participate in that process.  If you need assistance to accommodate a disability, you may request one at any time by either contacting your recruiter or .  1 The Barron's 2022 Top 100 RIA Firms list, a seven-year ranking of independent advisory firms, is qualitative and quantitative, including assets managed by the firms, technology spending, staff diversity, succession planning and other metrics. Firms elect to participate but do not pay to be included in the ranking. Ranking awarded each September based on data within a 12-month period. Compensation is paid for use and distribution of the rating. Investor experience and returns are not considered. The 2018 ranking refers to Edelman Financial Services, LLC, which combined its advisory business in its entirety with Financial Engines Advisors L.L.C. (FEA) in November 2018. For the same survey, FEA received a precombination ranking of 12th. 2 Edelman Financial Engines data, as of Dec. 31, 3 Edelman Financial Engines data, as of Dec. 31, 2022.

---