Azure AD Expert with Entra ID

Project overview

🔹 For our Client from banking industry we are looking for Azure AD Expert with Entra ID 🔹

Hybrid working model: Preferred location: Gdańsk/Gdynia or Warsaw. Hybrid setup: 3 days in the office per week.

The AD team requires additional resources to assist in implementing the required changes to tenants, subscriptions, and Conditional Access (CA) policies to incorporate NLP as a resource domain within the client environment.

The goal is to enable NLP to grant client accounts the necessary permissions to access resources within NLP, including applications and other access-controlled resources. This approach aims to reduce certain AVD requirements and simplify both user management (eliminating the need for separate NLP accounts) and the user experience, with users primarily working from client-provided laptops.

✔️Required expertise and experience:

Microsoft Entra ID & Cross-Tenant Governance

Cloud Infrastructure & Microsoft Azure Architecture

Azure Virtual Desktop (AVD)

• Senior Azure Consultant with expertise and hands-on experience in cross-tenant configurations, management groups, subscriptions, and Conditional Access policies.
• The consultant will work in collaboration with the existing NLP Azure Consultant, providing design and implementation support.
• Cross-Tenant Access Settings: Expert-level knowledge of configuring B2B collaboration, B2B direct connect, and trust settings, including MFA and compliant device claims, across separate corporate tenants.
• External Identities: In-depth understanding of external user management, guest accounts, and the cross-tenant synchronization lifecycle.
• Identity Governance and Lifecycle Management: Experience implementing Microsoft Entra ID Governance, entitlement management, access packages, and Privileged Identity Management (PIM) for external partners.
• Azure Role-Based Access Control (RBAC): Proven expertise in designing management groups, custom RBAC roles, and subscription-level permissions in multi-tenant environments.
• Enterprise Architecture: Experience aligning IT infrastructure across two distinct enterprise environments while maintaining clear security boundaries and preventing permission overlaps.
• Device Management Integration: Understanding of endpoint management and cross-tenant device compliance validation, including configuring tenant trust to recognize compliant devices managed by the client.
• Strong experience with AVD deployments, session hosts, and the architectural considerations required to safely reduce or eliminate AVD dependencies.

Nice to have

-

Contact person: [contact removed]

Client code: BN01

Do you know someone who would fit this position? Recommend a candidate by sending her/his CV to: [contact removed]

Whistleblowing Policy, which provides guidelines for reporting misconduct can be found on Ework website: https://www.eworkgroup.com/about-us/our-responsibility

• Stakeholder management: Ability to bridge communication gaps between separate technical teams (AD team, NLP team, and endpoints management team)
• Technical writing: Competency in drafting technical designs, migration plans and final runbooks

Project details

• Start: 2026-11-16
• Remote: hybrid
• Location: Gdansk, Poland; Gdynia, Poland; Warsaw, Poland, PL
• Rate: 195-195 EUR/h