Azure AD Expert with Entra ID

O projekcie The AD team requires additional resources to assist in implementing the required changes to tenants, subscriptions, and Conditional Access (CA) policies to incorporate NLP as a resource domain within the client environment.

The goal is to enable NLP to grant client accounts the necessary permissions to access resources within NLP, including applications and other access-controlled resources. This approach aims to reduce certain AVD requirements and simplify both user management (eliminating the need for separate NLP accounts) and the user experience, with users primarily working from client-provided laptops.

• Senior Azure Consultant with expertise and hands-on experience in cross-tenant configurations, management groups, subscriptions, and Conditional Access policies.
• The consultant will work in collaboration with the existing NLP Azure Consultant, providing design and implementation support.

Wymagania

• Required expertise and experience:

Microsoft Entra ID & Cross-Tenant Governance

• Cross-Tenant Access Settings: Expert-level knowledge of configuring B2B collaboration, B2B direct connect, and trust settings, including MFA and compliant device claims, across separate corporate tenants.
• External Identities: In-depth understanding of external user management, guest accounts, and the cross-tenant synchronization lifecycle.
• Identity Governance and Lifecycle Management: Experience implementing Microsoft Entra ID Governance, entitlement management, access packages, and Privileged Identity Management (PIM) for external partners.

Cloud Infrastructure & Microsoft Azure Architecture

• Azure Role-Based Access Control (RBAC): Proven expertise in designing management groups, custom RBAC roles, and subscription-level permissions in multi-tenant environments.
• Enterprise Architecture: Experience aligning IT infrastructure across two distinct enterprise environments while maintaining clear security boundaries and preventing permission overlaps.
• Device Management Integration: Understanding of endpoint management and cross-tenant device compliance validation, including configuring tenant trust to recognize compliant devices managed by the client.

Azure Virtual Desktop (AVD)

• Strong experience with AVD deployments, session hosts, and the architectural considerations required to safely reduce or eliminate AVD dependencies.
• Nice to have:
• Stakeholder management: Ability to bridge communication gaps between separate technical teams (AD team, NLP team, and endpoints management team)
• Technical writing: Competency in drafting technical designs, migration plans and final runbooks