Entra ID Customer Engineer

Sonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company powered by the Platformation™ framework. Our 6400+ AI Engineers help enterprises transform into intelligent business platforms, leveraging a partner ecosystem to drive speed, efficiency, and growth. Our AI-first modernization services span Cloud, Data, AI, Dynamics, Test Automation, and Managed Services, supported by proprietary tools like the Harmoni.AI Enterprise Platform, AgentBridge, Agent Builder, and the Agent Marketplace. Headquartered in Bengaluru, India, Sonata has a global presence across the US, UK, India, Malaysia, Mexico, Australia, DACH (Germany/Switzerland), and Nordics (Finland). We partner with Fortune 500 companies in Banking, Financial Services, Healthcare, Telecom, Media, Technology, Retail, Manufacturing, and Distribution. Deep collaborations with Microsoft, AWS, Salesforce, and Snowflake enhance our AI solution delivery. Sonata holds elite status as a Microsoft Inner Circle partner (top 1% globally) and is among the first to earn the Microsoft Frontier Partner Badge. We are also an AWS Premier Tier partner.

About the role

As a Customer Engineer, you will collaborate directly with customer teams to provide expert advisory services across a range of technologies. By leveraging structured intellectual property (MIP) engagements, you will establish trusted advisor relationships and guide customers toward achieving a healthy and secure state.

Responsibilities

• Provide expert advisory services on Entra ID and related technologies.
• Guide customers in implementing Role-Based Access Control (RBAC) and account management (user accounts, service principals, group management).
• Design and troubleshoot authentication models, including Cloud Auth (PTA/PHS), Federation, OAuth, SAML, ODIC, Kerberos, FIDO2, and Passkeys.
• Manage device integration, including Hybrid Join and AADJ, and account synchronization via Entra ID Connect and Entra Cloud Sync.
• Configure and optimize Azure P1/P2 features such as Conditional Access, MFA, risk-based policies, reporting, and Self-Service Password Reset (SSPR).
• Implement Entra ID Governance, including Privileged Identity Management, periodic reviews, self-service access reviews, and compliance audits.
• Utilize Microsoft Graph API for integrations and troubleshooting.
• Integrate Entra ID with Active Directory and manage Entra ID Protection.

Requirements

• 15+ years of experience in identity and access management.
• Deep knowledge (300–400 level) in the following areas:
  • Entra ID and Role-Based Access Control (RBAC).
  • Account Management (User Accounts, Service Principals, Group Management).
  • Authentication Models (Cloud Auth, Federation, OAuth, SAML, ODIC, Kerberos, FIDO2/Passkeys).
  • Device Management (Hybrid Join, AADJ).
  • Account Synchronization (Entra ID Connect, Entra Cloud Sync).
  • Azure P1/P2 Features (Conditional Access, MFA, risk-based policies, reporting, SSPR, Entra Password Protection).
  • Integration with Active Directory.
  • Entra ID Governance (Privileged Identity Management, periodic reviews, self-service access reviews, compliance audits).
  • Entra ID Protection Management.
  • Microsoft Graph API.

Skills

• Optional skills:
  • ADFS and Active Directory Certificate Services.
  • Azure services (Azure Monitor, Azure Sentinel, Defender for Endpoint).
• Relevant certifications:
  • Microsoft Certified: Identity and Access Administrator Associate or equivalent.
  • Microsoft Certified: Cybersecurity Architect Expert or equivalent.
  • Microsoft Certified Trainer or equivalent.
  • Certified Information Systems Security Practitioner (CISSP) or equivalent.

Benefits

At Sonata, you’ll have the opportunity to push the boundaries of what’s possible, building innovative solutions to complex global challenges. You’ll join a diverse team of innovators driven to craft what comes next, with a supportive environment that encourages growth and creativity.