Staff Security Operations Engineer - Irvine, United States

Originally posted 7 July 2026 by the employer.

About the role

The Staff Security Operations Engineer is responsible for driving Microsoft Entra ID device migrations and delivering engineering support for the Entra ID platform across the organization. The scope includes managing identity and access management technologies such as multi-factor authentication, mobile device management, and Active Directory.

What you'll do

- Lead the migration of devices into Microsoft Entra ID, including Entra ID join and hybrid Entra ID join scenarios, migration waves, runbooks, and rollback plans. - Configure and manage Microsoft Entra ID engineering components, including Conditional Access policies, Identity Protection, single sign-on (SSO), app registrations, and enterprise applications. - Maintain hybrid identity synchronization between on-premises Active Directory and Entra ID utilizing Microsoft Entra Connect. - Administer and enforce multi-factor authentication platforms, specifically Duo MFA and Windows Hello for Business, across integrated applications and systems. - Support Microsoft Intune security policies, device compliance, RBAC, PIM, and MAA governance. - Automate identity workflows, reporting, and provisioning using PowerShell and Microsoft Graph scripting.

What you'll need

- BA or BS in Information Technology, Computer Science, Information Security, or a related field (or equivalent hands-on experience in IAM). - 6+ years of experience in IT or Information Security with a focus on identity and access management. - 3+ years of direct, hands-on experience with Microsoft Entra ID (Azure AD), including device migration and engineering administration. - Hands-on experience configuring and managing Conditional Access, Identity Protection, SSO, and Microsoft Entra Connect (Azure AD Connect). - Proven experience administering Duo MFA, Windows Hello for Business, Microsoft Intune, and Active Directory (user accounts, group policies, organizational units). - Demonstrated scripting skills in PowerShell and Microsoft Graph for IAM automation, provisioning, and reporting.

Nice to have

- Relevant certifications such as Microsoft Certified: Identity and Access Administrator, Microsoft Certified: Endpoint Administrator, Certified Information Systems Security Professional (CISSP), or DUO Security Administrator. - Familiarity with Python for IAM automation and integration tasks. - Familiarity with SIEM platforms (such as Devo) for identity event monitoring and compliance audit reporting.

Skills: Entra ID device migration, Conditional Access, MFA, Active Directory, PowerShell/Graph scripting