Entra ID Specialist

1. Role Purpose / Job Description

2. Design, implement, manage, and support on-premises Active Directory (AD) and Azure Entra ID (Azure AD) environments.

3. Provide operational support (day-to-day) for identity infrastructure, user provisioning, authentication, and access management.
4. Ensure secure identity lifecycle (joiner / mover / leaver) processes.
5. Manage synchronization between on-prem AD and Entra ID (e.g., Azure AD Connect).
6. Implement and maintain identity governance (e.g., conditional access, role-based access control, MFA, identity protection).
7. Troubleshoot identity-related incidents and service disruptions, meeting SLAs.
8. Work with infrastructure, security, and cloud teams to integrate identity into broader Azure, hybrid, or on-prem systems.
9. Contribute to projects, such as migrating AD to Azure, modernizing identity, or consolidating domains.
10. Automate identity tasks using PowerShell, Microsoft Graph, or Infrastructure-as-Code (IaC) where possible.

11. Document identity architecture, processes, and standard operating procedures (SOPs).

12. Qualifications

13. Education:

14. NQF 6: 3-year Diploma / Degree in Information Technology, Computer Science, or related field
15. Or equivalent experience in identity / systems engineering.
16. Experience:
17. Minimum of 3 years experience in systems engineering (cloud, infrastructure, identity) in a medium-to-large enterprise or managed service environment.
18. Experience working with on-premises Active Directory (Domain Controllers, GPOs, trusts, OU structure).
19. Experience with Azure Entra ID (or Azure AD), including identity synchronization, conditional access, SSO, and MFA.
20. Exposure to hybrid identity architectures (on-prem + cloud).
21. Experience with identity-related incident resolution, service management, and change management.
22. Certifications (preferred):
23. Azure certifications (e.g., AZ-900, AZ-104)
24. Identity / Security-focused certs, for example: MS-500 (Microsoft Security), SC-100 (Microsoft Cybersecurity Architect), MS-900 (Microsoft 365 Fundamentals)

25. ITIL Foundation (V3 or V4) to align with BCX's operational support model

26. Technical Skills / Competencies

27. Deep understanding of Active Directory (DNS, replication, FSMO roles, GPOs, Group Policy, AD sites)

28. Hands-on experience with Azure Entra ID (user/groups management, role assignments, conditional access, identity protection)
29. Knowledge of Azure AD Connect (installation, configuration, sync rules, troubleshooting)
30. Familiarity with identity architecture patterns (hybrid, cloud-only, federated)
31. Experience with Automation / Scripting (PowerShell, Azure PowerShell, Microsoft Graph API)
32. Working knowledge of identity governance tools / concepts (PIM, access reviews, least-privilege)
33. Competencies in identity security controls (MFA, SSO, device-based conditional access)
34. Monitoring and logging: experience in using Azure Monitor, Azure AD logs, security reporting
35. Backup & disaster recovery strategies for identity services (on-prem DCs, Azure AD)

36. Change management and patching experience (identity system updates, schema changes)

37. Behavioural / Soft Skills

38. Problem Solving & Troubleshooting: Able to diagnose complex identity issues under pressure.

39. Communication: Strong verbal and written communication, to work with business stakeholders, security teams, and other tech teams.
40. Team Work: Works collaboratively within infrastructure, cloud, and security teams.
41. Service Orientation: Focus on meeting SLAs, ensuring identity services are reliable, secure, and performant.
42. Learning & Research: Keeps up to date with identity trends (e.g., Zero Trust, identity protection) and applies new knowledge.
43. Resilience & Stress Management: Able to cope with production incidents; on-call support as needed.

44. Process Adherence: Follows and improves standard operating procedures, change control, and documentation practices (as per BCX behavioral expectations).

45. Key Deliverables / Responsibilities

46. Ensure high availability and resiliency of AD / Entra ID infrastructure.

47. Manage and maintain synchronization (Azure AD Connect), ensuring no identity drift.
48. Implement and enforce access control policies via conditional access, RBAC, MFA.
49. Regularly review identity security (audit logs, risk analysis, identity protection).
50. Automate identity lifecycle tasks (provisioning, deprovisioning).
51. Support project implementations (e.g., migrating on-prem AD to Azure, rearchitecting identity).
52. Document identity architecture, processes, runbooks, and SOPs.
53. Conduct identity health-checks, capacity planning, and performance tuning.

54. Provide day-to-day operational support, including incident management, root-cause analysis, and resolution.

55. Reporting & Escalation

56. Report into the Enterprise Infrastructure or Cloud Operations team (depending on BCX's org structure).

57. Act as a technical lead for identity-specific escalations.
58. Engage with security / architecture teams for alignment on identity security posture.
59. Participate in Change Advisory Board (CAB) exercises for identity changes.

Job Types: Full-time, Temporary

Contract length: 12 months

Pay: R450 000,00 - R750 000,00 per year

Work Location: In person