ABOUT KALLES GROUP:
Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.
While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.
No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.
We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.
WHAT YOU WILL DO:
As a Senior Microsoft Entra ID Engineer, you’ll be on assignment with one of our enterprise clients, helping lead a large workforce identity migration. Authentication for thousands of applications, including many complex SAML integrations, is moving from a legacy identity provider to Microsoft Entra ID. You’ll own the design, build and operation of access management and identity governance in Entra, and you’ll have a lot of autonomy. Your work will include Conditional Access and authentication strategy (phishing-resistant MFA and passwordless), Privileged Identity Management, application SSO and provisioning, B2B access, and the full Entra ID Governance suite: entitlement management, access reviews and lifecycle workflows. You’ll make Entra-native governance work cleanly alongside SailPoint Identity Security Cloud and hybrid Active Directory, and you’ll automate with Microsoft Graph, PowerShell and Infrastructure as Code. You’ll also set engineering standards and mentor other engineers on the team.
KEY RESPONSIBILITIES:
ABOUT YOU:
Your values:
- Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
- Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
- Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.
YOUR EXPERIENCE:
Required Qualifications- The annual salary range for this role is $135,000-$155,000.
- We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
- Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.
LOCATION:
This role is hybrid with onsite requirements at our client's location in Seattle, WA. Therefore, we are currently only considering candidates that are already living in the Seattle area.
HOW TO APPLY:
Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.
Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to [email protected].
Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.
Skills Required
- Bachelor's or master's degree in computer science, cybersecurity, information technology, or equivalent experience
- 4+ years of experience in IAM or security engineering, including leading technical projects
- Deep hands-on experience with Microsoft Entra ID, including Conditional Access, authentication methods, PIM, and Entra ID Protection
- Hands-on experience with Entra ID Governance, including entitlement management, access packages, access reviews, and lifecycle workflows
- Expert knowledge of SAML, OAuth 2.0, OIDC, SCIM, and their security implications
- Experience with hybrid identity using Entra Connect or Cloud Sync and on-premises Active Directory
- Experience automating Entra ID using Microsoft Graph API, Graph PowerShell SDK, PowerShell, and Python
- Experience with Terraform or Bicep
- System-level design skills and ability to establish engineering standards
- Clear communication with engineers and stakeholders and ability to operate autonomously
- SC-300, SC-100, AZ-500, CISSP, or SailPoint certification
- Experience integrating Entra governance with SailPoint IdentityNow or Identity Security Cloud
- Familiarity with privileged access management platforms such as BeyondTrust
- Experience with external or B2B identity, cross-tenant collaboration, and guest governance at scale
- Exposure to identity threat detection and response, including feeding identity signals into SIEM or SOAR
- Experience with Entra Verified ID, Permissions Management, or Global Secure Access
- Large-scale retail, ecommerce, or high-transaction enterprise experience
What We Do
We believe that everyone deserves to be secure. This is the foundation of everything we do for our customers, our consultants, and our communities. Our consulting services span cybersecurity, cyber risk, engineering, project leadership and learning services. Our team of industry veterans helps our partners with complex security and technology problems in a human way. Our values of integrity, ownership and purposefulness ensure our team provides the best possible outcomes time and time again, while helping us build and maintain long-term healthy relationships with our customers.
