Cloud Identity Engineer

We’re hiring: Senior Cloud Identity Engineer (Microsoft Entra ID) | Remote
Arvenda is connecting top LATAM talent with U.S.-based clients. We are recruiting a Senior Cloud Identity Engineer for a managed services provider and consultancy that has specialized exclusively in Identity and Access Management for more than 20 years. You will own the Microsoft Entra ID platform for a new client with a large hybrid Active Directory and Entra environment.
🌍 Location: 100% Remote (LATAM)⏰ Working Hours: Full-time (40 hours/week, Monday–Friday, 8:00 AM–5:00 PM Pacific Time)📝 Contract Type: Independent Contractor (No PTO, requires own device/equipment)💻 Core Tech / Industry: Microsoft Entra ID, IAM, SSO, PIM / IT Consultancy
What you’ll do:Design, configure, and operate Conditional Access, MFA and authentication methods, Privileged Identity Management (PIM), and Identity Protection.Onboard and troubleshoot application and SSO integrations, app registrations, and enterprise application consent.Run access reviews and manage entitlements as part of identity governance.Act as the primary technical contact for Entra: gather requirements, recommend designs, and lead working sessions with client stakeholders.Follow each client’s change management process and document decisions and configurations.Take on tickets, engineering, and project work as directed by the client, occasionally assisting with Active Directory and hybrid identity work when it overlaps with Entra.
What we’re looking for:Hands-on production experience administering Entra ID at enterprise scale (thousands of users), including Conditional Access, MFA, PIM, and Identity Protection.Ability to run requirements and design meetings independently, in clear spoken and written English.Strict availability to work Pacific business hours reliably.SSO integration experience (SAML, OIDC/OAuth), app registrations, and enterprise applications.Access reviews, entitlement management, and identity governance fundamentals.Hands-on experience rolling out passkeys, FIDO2, and Temporary Access Pass.Microsoft SC-300 (Identity and Access Administrator) certification or equivalent.Must possess a reliable personal computer/device and a high-speed, stable internet connection to perform all duties.Bonus: HR-driven lifecycle provisioning workflows; External and guest identities (B2B); Device-aware access (Intune compliance); SIEM integration; Automation with Microsoft Graph and PowerShell; Working knowledge of hybrid identity (Entra Cloud Sync or Entra Connect).