{"id":3838018,"url":"https://alion.io/job/viateq-senior-entra-id-integration-engineer","title":"Senior Entra ID Integration Engineer","company":{"id":4432055,"name":"Viateq","domain":"viateq.com","url":"https://alion.io/company/viateq","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FedRAMP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-11-05T21:42:14Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-11T23:38:18Z","board_verified":false,"closed_at":"2026-11-11T23:38:18Z","days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"VIATEQ Corporation is looking for an experienced Senior Entra ID Integration Engineerto support enterprise identity and access management operations and IT administrative and operational support services for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Specific clearance requirements will be confirmed at time of offer. Primary work will be performed at the client site in Washington, DC and approved remote/telework locations.\nThis role serves as a critical senior technical function responsible for the architecture, engineering, implementation, administration, and continuous improvement of enterprise Microsoft Entra ID (formerly Azure Active Directory) identity and access management capabilities across a complex, geographically distributed federal IT environment spanning on-premises infrastructure, cloud platforms, hybrid environments, and enterprise applications.\nThe ideal candidate is a highly experienced and technically authoritative identity and access management engineer with deep, hands-on expertise across the full Microsoft Entra ID platform portfolio-including Entra ID tenant administration, Conditional Access, Privileged Identity Management (PIM), Identity Protection, External Identities, Entra ID Governance, and hybrid identity integration with on-premises Active Directory-combined with a comprehensive understanding of enterprise identity architecture, Zero Trust identity principles, and Federal cybersecurity compliance requirements. This individual must possess the technical depth, architectural vision, and operational discipline required to lead the design, implementation, and sustained operation of enterprise-grade Entra ID identity capabilities that protect Government identities, enforce least-privilege access, and support Zero Trust objectives in a highly regulated federal IT environment.\nThe Senior Entra ID Integration Engineer will serve as the program's primary subject matter expert and technical authority for all Microsoft Entra ID platform capabilities, leading the architecture, engineering, implementation, administration, and continuous improvement of enterprise identity and access management infrastructure. This individual works closely with security engineers, network engineers, cloud operations teams, Zero Trust engineers, DevSecOps engineers, application developers, and Government stakeholders to ensure Entra ID capabilities are architected, deployed, and operated in a manner that delivers maximum identity security, operational resilience, and compliance with Federal cybersecurity frameworks and Zero Trust Architecture objectives across the full enterprise environment.\nResponsibilities:\nArchitecture & Engineering Leadership\nServe as the program's technical authority and subject matter expert for all Microsoft Entra ID platform capabilities, providing authoritative architectural guidance, engineering leadership, and expert technical recommendations to program leadership, functional teams, and Government stakeholders on identity architecture, access management strategy, and Zero Trust identity implementation.\n\nLead the design and architecture of enterprise Microsoft Entra ID identity solutions, including tenant architecture design, hybrid identity infrastructure, Conditional Access policy frameworks, Privileged Identity Management configurations, Identity Protection policies, and Entra ID Governance implementations aligned with Federal Zero Trust requirements and program security objectives.\n\nDevelop and maintain enterprise Entra ID architecture documentation, including identity architecture diagrams, authentication flow diagrams, Conditional Access policy frameworks, hybrid identity topology diagrams, and platform configuration baselines, ensuring documentation is current, accurate, and aligned with operational reality.\n\nLead identity architecture reviews for new systems, applications, cloud migrations, and infrastructure changes, assessing Entra ID platform impact, identifying identity security risks, and recommending configuration and policy improvements to maintain Zero Trust identity posture.\n\nDesign and implement Zero Trust identity architectures leveraging Microsoft Entra ID capabilities, including continuous access evaluation, risk-based Conditional Access, phishing-resistant MFA enforcement, identity risk detection, and least-privilege access governance.\n\nEvaluate emerging Microsoft Entra ID platform capabilities, identity security industry developments, and Federal identity policy requirements, providing well-researched recommendations to program leadership and Government stakeholders on opportunities to enhance identity security and advance Zero Trust maturity.\n\nProvide senior technical leadership and mentorship to junior and mid-level engineers, sharing identity and access management expertise, guiding technical development, and ensuring consistent application of identity engineering best practices across the team.\n\nEntra ID Tenant Administration & Engineering\nLead the engineering, implementation, and administration of the enterprise Microsoft Entra ID tenant, ensuring the tenant is properly configured, secured, and continuously maintained in alignment with Federal security requirements, Microsoft security best practices, and applicable DISA STIGs and CIS Benchmarks.\n\nDesign and maintain the enterprise Entra ID tenant configuration, including directory settings, authentication methods, password policies, self-service password reset (SSPR) configurations, and security defaults enforcement in alignment with Zero Trust identity principles.\n\nImplement and maintain enterprise Entra ID authentication method policies, ensuring phishing-resistant MFA-including FIDO2 security keys, Windows Hello for Business, and certificate-based authentication-is deployed, enforced, and operationally managed across all user populations.\n\nConfigure and maintain Entra ID domain configurations, custom domain registrations, and tenant branding settings, ensuring the tenant accurately represents the Government organization and supports seamless user authentication experiences.\n\nAdminister Entra ID directory objects, including user accounts, groups, administrative units, and service principals, ensuring accurate provisioning, lifecycle management, and deprovisioning in accordance with defined identity governance procedures.\n\nImplement and maintain Entra ID group management policies, including dynamic group membership rules, group naming conventions, group lifecycle policies, and group-based access assignment configurations.\n\nMonitor Entra ID tenant health, service availability, and operational metrics, proactively identifying and resolving tenant configuration issues, service disruptions, and security anomalies.\n\nConditional Access Engineering\nLead the design, implementation, and continuous optimization of the enterprise Conditional Access policy framework, ensuring all access to Government resources is continuously evaluated against defined trust signals and that access decisions enforce Zero Trust least-privilege principles.\n\nDesign and implement a comprehensive, well-structured Conditional Access policy architecture, including named locations, compliance requirements, sign-in risk policies, user risk policies, session controls, and application-specific access policies that collectively enforce granular, risk-based access control across the enterprise.\n\nImplement and maintain phishing-resistant MFA enforcement policies, ensuring strong, unphishable authentication factors are required for all privileged access, high-value application access, and access from non-compliant or unmanaged devices.\n\nDesign and implement device compliance-based Conditional Access policies, integrating Microsoft Intune device compliance signals into access control decisions to enforce Zero Trust device trust requirements.\n\nImplement and maintain sign-in risk and user risk-based Conditional Access policies, leveraging Entra ID Identity Protection risk signals to dynamically adjust authentication requirements and access restrictions based on detected identity risk.\n\nImplement and maintain Continuous Access Evaluation (CAE) configurations, ensuring access tokens are continuously validated and revoked in near-real time when critical security events or policy changes are detected.\n\nManage Conditional Access policy lifecycle, including regular policy review and optimization cycles, policy documentation maintenance, exclusion management, and impact assessment for proposed policy changes.\n\nDevelop and maintain Conditional Access policy documentation, including policy specifications, decision matrices, exclusion registers, and impact assessment records, ensuring the policy framework is well-documented and auditable.\n\nPrivileged Identity Management (PIM) Engineering\nLead the engineering, implementation, and administration of Microsoft Entra ID Privileged Identity Management (PIM) capabilities, ensuring all privileged access to Azure resources, Entra ID roles, and enterprise applications is governed through just-in-time access provisioning, approval workflows, and continuous monitoring.\n\nDesign and implement PIM role assignment policies for all Entra ID directory roles and Azure resource roles, defining eligibility criteria, activation requirements, maximum activation durations, approval workflows, and justification requirements for each privileged role.\n\nConfigure and maintain PIM access review campaigns for all privileged role assignments, ensuring periodic certification of privileged access is conducted, documented, and enforced in alignment with least-privilege access governance requirements.\n\nImplement and maintain PIM alert configurations, ensuring anomalous privileged access activities-including role activations outside business hours, repeated activation failures, and assignments outside PIM governance-are detected and escalated promptly.\n\nDevelop and maintain PIM operational documentation, including privileged role catalogs, activation procedure guides, and access review schedules, ensuring PIM governance processes are well-documented and consistently followed.\n\nIdentity Protection Engineering\nLead the engineering, implementation, and administration of Microsoft Entra ID Identity Protection capabilities, ensuring continuous detection, investigation, and remediation of identity-based threats across the enterprise user population.\n\nConfigure and maintain Identity Protection user risk and sign-in risk detection policies, ensuring high-risk identity events trigger appropriate automated remediation actions-including MFA challenges, password resets, and session termination-or are escalated for manual investigation.\n\nDevelop and maintain Identity Protection risk investigation workflows, ensuring security operations personnel have clear procedures for investigating and remediating detected identity risk events in a timely and consistent manner.\n\nIntegrate Identity Protection risk signals with the enterprise SIEM platform and security operations workflows, ensuring identity risk detections are incorporated into the program's broader threat detection, investigation, and incident response processes.\n\nMonitor Identity Protection detection effectiveness, analyzing risk detection rates, false positive patterns, and remediation outcomes to identify tuning opportunities and improve detection fidelity.\n\nEntra ID Governance Engineering\nLead the engineering, implementation, and administration of Microsoft Entra ID Governance capabilities, including entitlement management, access reviews, lifecycle workflows, and terms of use policies, ensuring identity governance processes are automated, auditable, and aligned with least-privilege access principles.\n\nDesign and implement Entra ID Governance entitlement management configurations, incl...","description_format":"text","description_chars":23467,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Government","Identity Management","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-05T21:42:14Z"},{"event":"close","at":"2026-11-11T23:38:18Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":160000,"is_top_pay":true},"html_url":"https://alion.io/job/viateq-senior-entra-id-integration-engineer","json_url":"https://alion.io/job/viateq-senior-entra-id-integration-engineer.json","meta":{"generated_at":"2026-11-15T02:54:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5380,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4432055},"rest":"https://alion.io/mcp/rest/get_company?id=4432055"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fviateq-senior-entra-id-integration-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fviateq-senior-entra-id-integration-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fviateq-senior-entra-id-integration-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/viateq-senior-entra-id-integration-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fviateq-senior-entra-id-integration-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3838018}},{"tool":"search_jobs","arguments":{"company":"viateq.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3838018},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}