Azure AD / Microsoft Entra ID Consultant

About the role

The Azure AD / Microsoft Entra ID Consultant will assess the current identity environment, identify gaps against best practices and security frameworks, and design and implement secure, scalable identity solutions for cloud, hybrid and enterprise applications.

Key responsibilities

• Perform comprehensive assessments of Azure AD / Entra ID tenants, including configuration, user/group structures, authentication mechanisms and hybrid identity setups.
• Review Conditional Access policies, MFA, Identity Protection, privileged roles, application registrations, OAuth permissions and B2B guest access.
• Conduct gap analysis against Microsoft Entra ID best practices, Zero Trust architecture and standards such as ISO 27001, NIST and CIS Benchmarks.
• Document risks, business impact, severity and provide remediation recommendations in executive‑ready reports.
• Engage with IT, security, application owners and compliance teams to gather business, security and lifecycle management requirements.
• Define and design Conditional Access policies, MFA strategy, identity lifecycle processes and application onboarding procedures.

Required profile

• Proven experience with Azure AD, Microsoft Entra ID and hybrid identity solutions (Azure AD Connect, Cloud Sync).
• Strong understanding of Zero Trust, Conditional Access, MFA, Identity Protection and privileged access management.
• Familiarity with security frameworks (ISO 27001, NIST, CIS) and ability to translate them into actionable recommendations.
• Excellent analytical and communication skills to interact with technical and business stakeholders.

Required skills

• Azure AD / Microsoft Entra ID
• Azure AD Connect & Cloud Sync
• Conditional Access
• Multi‑Factor Authentication (MFA)
• Identity Protection & Privileged Identity Management
• OAuth, API access, B2B guest access
• Zero Trust architecture
• ISO 27001, NIST, CIS Benchmarks
• Microsoft 365, Azure workloads, on‑prem Active Directory