Senior Authentication Engineer – Entra

Job not on LinkedIn

🔥 0 minutes ago

🇨🇦 Canada – Remote

💵 $105k - $135k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NBCUniversal

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2004

📱 Media

Media • Entertainment

NBCUniversal is a leading global media and entertainment company known for creating and distributing content across a variety of platforms. With over 100 years of experience, it is a part of Comcast and encompasses brands like Peacock, NBC Sports, and many others to educate, entertain, and empower audiences around the world. The company is involved in television broadcasting, film production, and theme parks, and is also recognized for its initiatives in technology and corporate social responsibility. NBCUniversal is committed to innovation and social impact, making it a vibrant workplace for media and tech professionals.

📋 Description

• Design, implement, and manage enterprise authentication services, including SSO, MFA, passwordless authentication, adaptive authentication, and federation services • Administer and support Microsoft Entra ID authentication services and related identity platforms • Lead deployment and adoption of FIDO2 security keys, Windows Hello for Business, passkeys, certificate-based authentication, and passwordless solutions • Develop and maintain authentication standards, reference architectures, procedures, and operational runbooks • Implement authentication controls aligned with Zero Trust principles • Investigate authentication-related security incidents with Cyber Defense teams • Analyze authentication telemetry, identify suspicious sign-in activity, and recommend mitigation strategies • Evaluate and implement authentication technologies, security enhancements, and industry best practices • Ensure high availability, resiliency, disaster recovery readiness, and operational excellence of authentication platforms • Monitor service health, performance, capacity, and adoption metrics • Lead root cause analysis and problem management for outages and incidents • Drive automation initiatives to improve operational efficiency and service quality • Design and support authentication integrations for SaaS, cloud-native, on-premises, custom, and third-party applications • Collaborate with application teams to onboard applications using SAML, OAuth 2.0, OIDC, WS-Federation, and SCIM • Contribute to authentication roadmaps and modernization initiatives • Identify opportunities to eliminate legacy authentication methods and adopt secure alternatives • Develop technical documentation, architecture diagrams, and implementation guidance • Partner with IAM, Cyber Security, Infrastructure, Application Development, and Workplace Technology teams

🎯 Requirements

• 5+ years of experience at the Engineer level implementing enterprise access management solutions • 3+ years of hands-on experience with Microsoft Entra ID authentication services • Bachelor’s or Master’s degree in computer science, information security, a related field, or equivalent work experience • Understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, WS-Federation, and LDAP • Experience with Microsoft Entra ID, Active Directory, MFA technologies, federation services, Conditional Access, Identity Protection, and Privileged Identity Management • Experience implementing and supporting passwordless authentication solutions • Understanding of cloud security and Zero Trust architecture principles • Working knowledge of SIEM tools such as Splunk, including running reports and configuring alerts • Ability to interpret complex designs and explain them at an executive level • Knowledge of DNS, TLS/SSL, certificates, proxies, and load balancing • 2+ years of experience with scripting languages such as PowerShell or Python • Experience with Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS) • Experience with large-scale identity verification solutions for enterprises • One or more Azure or Microsoft Security certifications preferred, such as AZ-900, AI-900, AZ-500, SC-300, or AZ-305 • Knowledge of integrating AI agents with identity providers and applying governance to access and lifecycle management • Ability to apply AI-driven analytics to identity governance, intelligent access decisions, anomalous behavior detection, and IAM workflow optimization • Strong troubleshooting, communication, and presentation skills • Ability to translate business requirements into secure and scalable technical solutions • Experience researching industry trends and best practices • Demonstrated ownership, accountability, customer-first mindset, cross-functional partnership, service reliability, operational excellence, automation, and data-driven decision-making

🏖️ Benefits

• Medical, dental and vision insurance • 401(k) • Paid leave • Tuition reimbursement • Variety of other discounts and perks • Fully remote work arrangement