Jobs · Maryland

Microsoft Identity - Entra ID Sr Consultant

Deloitte · Baltimore, MD · 1 mo ago
Hybrid$108k–$189k/yrFull-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule as appropriate. Must not repeat job title. Must not include boilerplate. Must preserve all substantive info. Must not create sections with filler. Must include only sections where there is real specific content. We need to parse the posting. Content: First paragraph: "Bring your identity, access, and privacy experience to Deloitte's Government & Public Services practice, where you will support public sector clients in addressing evolving digital trust challenges. This role offers the opportunity to help clients design, implement, and improve identity and access management capabilities that support secure, scalable, and mission-focused environments. You will work across business and technical teams to help organizations modernize technology, manage risk, and strengthen user access controls." That's about the role. Could be "About the role". Then "Work you'll do As a Microsoft Identity Entra ID Senior Consultant for the Digital Trust & Privacy offering on the Government & Public Services Cyber team, you will be responsible for:" then bullet list (actually sentences). We'll treat as Responsibilities. List items: - Support the design, configuration, and implementation of identity and access management solutions for government and public sector clients - Analyze business, security, and technical requirements to help define access models, user lifecycle processes, and control requirements - Design and enforce Conditional Access policies, MFA, SSO (SAML, OAuth2, OpenID Connect), and Identity Protection - Assist with the implementation and enhancement of Microsoft Entra and related identity technologies to support authentication, authorization, and access governance objectives - Develop project deliverables, including requirements documents, process flows, test scripts, status updates, and client-ready presentations - Collaborate with cross-functional teams to support workshops, issue resolution, deployment activities, and ongoing process improvement initiatives Then "A successful candidate would possess these skills:" then list of skills (soft skills). That's Skills section. List: - Ability to work independently and collaborate as part of a team - Effective written and verbal communication skills - Meticulous attention to detail and quality of work product - Ability to build and sustain professional relationships - Ability to lead projects or workstreams - Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment - Strong interpersonal skills and professional demeanor - Ability to meet deadlines - Ability to provide clear guidance to others Then "The team Deloitte's Government & Public Services Cyber practice helps government agencies, higher education institutions, and other public sector organizations address evolving identity, security, and privacy challenges. The team works with clients to design, implement, and improve enterprise identity and access management capabilities, including Microsoft Entra, to support secure and scalable environments. Professionals in this practice collaborate across strategy, implementation, and operations to help clients modernize technology while managing risk. This role offers the opportunity to support mission-driven work with public sector impact." That could be part of About the role or maybe separate "Team" but we only have allowed headings. Could incorporate into About the role. Then "Qualifications Required:" then list of qualifications. List: - Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field - Ability to work onsite up to 5 days a week as required by the project team/client. - 2+ years of experience in identity and access management, cybersecurity, privacy, or enterprise technology implementation - 2+ years of experience in the following: - Microsoft Entra ID (Azure AD) administration, governance, and troubleshooting - Experience with Conditional Access, MFA, SSO, RBAC, or PIM - Hybrid identity solutions (Entra Connect, Cloud Sync) - SAML/OAuth2/OpenID Connect integrations - One or more of the following certifications: Microsoft Certified: Identity and Access Administrator Associate, Certified Information Systems Security Professional, or Certified Information Privacy Professional - 4+ years of experience translating business and technical requirements into solution design, configuration, and test documentation - 2+ years of experience supporting implementation or administration of Microsoft Entra ID, Microsoft Active Directory, or comparable identity platforms - 2+ years of experience with single sign-on, multifactor authentication, role-based access control, or user lifecycle management - Ability to travel 15%, on average, based on the work you do and the clients and industries/sectors you serve. - Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Then "Preferred:" list: - 1+ years of experience supporting government, higher education, or other public sector clients - 1+ years of experience with Microsoft Entra ID Conditional Access, Privileged Identity Management, or identity governance capabilities - 1+ years of experience with access certification, role mining, or segregation of duties processes - 1+ years of experience working in Agile delivery environments Then "The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $107,925 to $188,995. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance." That's Pay section. No explicit Benefits or Schedule. There's mention of ability to work onsite up to 5 days a week (that's schedule? but it's a requirement). There's travel 15% (maybe schedule?). There's no explicit benefits like health, retirement. So we should not create Benefits or Schedule sections unless posting actually states them. There's no explicit benefits statement. So we omit Benefits and Schedule. We need to include sections: About the role, Responsibilities, Skills, Qualifications, Pay. Possibly also Requirements? The qualifications are separate from Requirements? The posting lumps qualifications required and preferred. Could treat "Qualifications" as required qualifications, and maybe "Requirements" as something else? But we have both Qualifications and Requirements headings allowed. The posting has "Qualifications Required:" and "Preferred:" which are both qualifications. There's no separate "Requirements" besides qualifications. Could we treat "Qualifications" as required and maybe "Requirements" as something else? The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can choose which to include. We have content for About the role, Responsibilities, Skills, Qualifications (required), Pay. We could also include Requirements as a separate section for the "Ability to work onsite up to 5 days a week", travel, legal authorization etc. But those are also qualifications. Might be better to put all under Qualifications. However we have both Qualifications and Requirements headings allowed; we could split: Requirements = mandatory qualifications (like degree, years experience, onsite, travel, legal auth). Qualifications = preferred? But the posting labels "Qualifications Required:" and "Preferred:" So we could map Required to Qualifications, Preferred to Requirements? Actually "Qualifications Required:" is clearly qualifications. "Preferred:" are preferred qualifications. So we could have Qualifications (required) and Requirements (maybe not needed). But we have to avoid filler. If we create Requirements section with no content, that's not allowed. So we should not create Requirements unless we have specific content. We could treat the "Preferred:" as Requirements? Not ideal. Better to have sections: About the role, Responsibilities, Skills, Qualifications (covers both required and preferred), Pay. That's sufficient. We must not repeat job title. No mention of Job ID. We must output only HTML fragment, no /. Use

for headings,
  • for lists,

    for prose. We need to preserve all substantive information. Ensure we don't lose any details. Let's craft:

    About the role

    Bring your identity, access, and privacy experience to Deloitte's Government & Public Services practice, where you will support public sector clients in addressing evolving digital trust challenges. This role offers the opportunity to help clients design, implement, and improve identity and access management capabilities that support secure, scalable, and mission-focused environments. You will work across business and technical teams to help organizations modernize technology, manage risk, and strengthen user access controls. The team helps government agencies, higher education institutions, and other public sector organizations address evolving identity, security, and privacy challenges, designing, implementing, and improving enterprise identity and access management capabilities—including Microsoft Entra—to support secure and scalable environments while collaborating across strategy, implementation, and operations to modernize technology and manage risk, offering the opportunity to support mission‑driven work with public sector impact.

    That combines the team description. Then Responsibilities:

    Responsibilities

    • Support the design, configuration, and implementation of identity and access management solutions for government and public sector clients
    • Analyze business, security, and technical requirements to help define access models, user lifecycle processes, and control requirements
    • Design and enforce Conditional Access policies, MFA, SSO (SAML, OAuth2, OpenID Connect), and Identity Protection
    • Assist with the implementation and enhancement of Microsoft Entra and related identity technologies to support authentication, authorization, and access governance objectives
    • Develop project deliverables, including requirements documents, process flows, test scripts, status updates, and client‑ready presentations
    • Collaborate with cross‑functional teams to support workshops, issue resolution, deployment activities, and ongoing process improvement initiatives
    Skills:

    Skills

    • Ability to work independently and collaborate as part of a team
    • Effective written and verbal communication skills
    • Meticulous attention to detail and quality of work product
    • Ability to build and sustain professional relationships
    • Ability to lead projects or workstreams
    • Ability to manage and prioritize multiple tasks in a fast‑paced and dynamic environment
    • Strong interpersonal skills and professional demeanor
    • Ability to meet deadlines
    • Ability to provide clear guidance to others
    Qualifications: We need to include both required and preferred. Could separate into Required Qualifications and Preferred Qualifications but we only have Qualifications heading. Could include both under Qualifications with subheadings? Not allowed to add extra headings beyond those? The instruction only says use those headings for sections; doesn't forbid other headings inside? Safer to keep only the allowed headings. Could embed both required and preferred as separate lists under Qualifications, maybe with a note. But we must not invent headings like "Required" or "Preferred". Could just have one list combining all items. However we risk losing distinction but still preserve all info. That's acceptable. Let's list all items: - Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field - Ability to work onsite up to 5 days a week as required by the project team/client. - 2+ years of experience in identity and access management, cybersecurity, privacy, or enterprise technology implementation - 2+ years of experience in the following: - Microsoft Entra ID (Azure AD) administration, governance, and troubleshooting - Experience with Conditional Access, MFA, SSO, RBAC, or PIM - Hybrid identity solutions (Entra Connect, Cloud Sync) - SAML/OAuth2/OpenID Connect integrations - One or more of

Similar jobs