Scope of duties Design, implement, administer, and optimize Microsoft Entra ID–centric identity solutions in cloud-first and hybrid environments, with on‑premises Active Directory as a supporting component Lead and deliver modern identity and access management (IAM) solutions based on Microsoft Entra ID, aligned with Zero Trust principles Implement and manage modern authentication and authorization capabilities, including: Conditional Access MFA and passwordless authentication Identity Protection and risk-based access controls Design and deploy Identity Governance & Administration (IGA) capabilities within Entra ID: Joiner / Mover / Leaver (JML) processes Access packages and access reviews Privileged Identity Management (PIM) Design, implement, and support hybrid identity architectures, including synchronization and coexistence scenarios between Entra ID and on‑premises Active Directory Support identity transformation initiatives, such as: Transition from legacy AD‑centric models to cloud‑based identity AD rationalization, cleanup, and consolidation as part of Entra ID adoption Reduction of legacy authentication protocols and technical debt Provide guidance and hands‑on support in Active Directory where required, including: AD DS administration (users, groups, compu