Azure AD / Microsoft Entra ID Expert (Cross-Tenant Access & Identity Governance)

Quick Facts

Salary: 1000 - 1300 PLN/day on B2B. Work model: 100% remote.

Description

You will be involved in a financial project integrating a separate enterprise domain into a Microsoft Entra ID ecosystem by designing and implementing secure cross-tenant access, identity governance, and access management solutions. The work aims to simplify user management, eliminate the need for separate accounts, reduce Azure Virtual Desktop dependencies, and enable secure access to resources directly from Nordea-managed devices.

Responsibilities

• Design and implement cross-tenant access architecture between Nordea and external environments.
• Configure Microsoft Entra ID B2B Collaboration, B2B Direct Connect, and trust settings.
• Define and implement Conditional Access policies for cross-tenant scenarios.
• Establish identity governance processes, entitlement management, and access lifecycle controls.
• Design Azure management group, subscription, and RBAC structures supporting multi-tenant operations.
• Support migration away from selected Azure Virtual Desktop dependencies.
• Collaborate with Nordea AD, endpoint management, and external domain teams to ensure secure integration.
• Produce technical documentation, implementation plans, and operational runbooks.
• Support deployment activities and provide technical guidance throughout delivery.

Benefits

• Flexible work organization.
• International environment with daily opportunities to use English.
• Scandinavian organizational culture focused on work-life balance, with training time financed by Jit.
• Regular integration meetings and a supportive Jit community.

Requirements

• Extensive experience with Microsoft Entra ID (Azure AD) administration and architecture.
• Strong expertise in Cross-Tenant Access, B2B Collaboration, B2B Direct Connect, and External Identities.
• Deep understanding of identity governance, entitlement management, access packages, and Privileged Identity Management (PIM).
• Experience designing and implementing Conditional Access policies in enterprise environments.
• Strong knowledge of Azure RBAC, Management Groups, subscriptions, and multi-tenant governance models.
• Experience integrating separate enterprise domains while maintaining security and compliance requirements.
• Understanding of device compliance, endpoint management, and cross-tenant trust mechanisms.
• Hands-on experience with Azure Virtual Desktop architecture and migration strategies.
• Ability to collaborate with multiple technical stakeholders and drive alignment across teams.
• Strong documentation and technical design skills.