Senior Azure AD / Microsoft Entra ID Expert

Quick Facts

• Role: Senior Azure AD / Microsoft Entra ID Expert

• Domain: Banking (global client)

• Work model: Hybrid (3 days/week on-site)

• Location: Warsaw or Tricity (Gdańsk/Gdynia)

• Type: Full-time (40 h/week)

• Rate: Up to 170 PLN/h net (B2B)

Description

You will support a cross-tenant initiative to integrate a partner tenant as a resource domain so client accounts can securely access applications and resources without separate accounts. The goals are to simplify user management and improve user experience while reducing Azure Virtual Desktop dependencies.

Responsibilities

• Design and implement changes to tenants, subscriptions, and Conditional Access policies to enable cross-tenant access

• Configure cross-tenant access settings including B2B collaboration, B2B direct connect, and trust settings (MFA and compliant device claims)

• Set up permissions for client accounts to access applications and other access-controlled resources in the partner tenant

• Design management groups, custom RBAC roles, and subscription-level permissions while maintaining clear security boundaries

• Support the safe reduction of Azure Virtual Desktop dependencies

• Work closely with the partner’s Azure consultant, the AD team, and the endpoint management team

• Prepare technical designs, migration plans, and runbooks

Requirements

• Senior-level, hands-on experience with Microsoft Entra ID (Azure AD) in enterprise environments

• Expert knowledge of cross-tenant access settings: B2B collaboration, B2B direct connect, trust settings for MFA and compliant devices

• In-depth understanding of External Identities, guest accounts, and the cross-tenant synchronization lifecycle

• Experience with Entra ID Governance: entitlement management, access packages, and Privileged Identity Management (PIM) for external partners

• Proven expertise in Azure RBAC, management groups, custom roles, and subscription-level permissions in multi-tenant environments

• Strong experience designing and managing Conditional Access policies

• Experience aligning infrastructure across two separate enterprise environments while preventing permission overlaps

• Understanding of endpoint management and cross-tenant device compliance validation

• Strong experience with Azure Virtual Desktop deployments and session hosts

• Fluent English

Benefits

• Rate up to 170 PLN/h net (B2B)

• Hybrid work model: 3 days per week on-site

• Full-time schedule: 40 h/week