Azure Active Directory Engineer

Azure Function Automation Engineer responsible for automating the lifecycle management of NonHuman Identities (NHI), Service Principals, and Entra identities using Azure Functions and Microsoft Graph APIs. Includes workflow automation, RBAC/API permission management, ServiceNow integration, testing, deployment, and governance support.

Key Responsibilities

• Design, develop, and enhance Azure Functionbased automation workflows for NHI request, modification, and decommissioning processes integrated with ServiceNow.
• Implement Azure Function automation for Service Principal lifecycle management, including Create, Update, and Delete (CUD) operations.
• Develop automation workflows to manage API permissions, delegated/application permissions, and RBAC role assignments using Microsoft Graph APIs.
• Integrate Azure Functions with Entra ID, Active Directory, HC Vault, and ServiceNow platforms.
• Implement governance controls and lifecycle automation for Service Principals, Managed Identities, and Group Managed Service Accounts (gMSA).
• Enable centralized visibility, reporting, and monitoring of permission assignments and identity usage.
• Collaborate with IAM, operations, infrastructure, and security teams to align automation with governance standards and operational requirements.
• Perform Unit Testing, System Integration Testing (SIT), and User Acceptance Testing (UAT) for automation workflows and integrations.
• Validate provisioning, deprovisioning, RBAC assignments, API permissions, and workflow execution across integrated systems.
• Troubleshoot and resolve integration issues, API failures, authentication issues, and workflow discrepancies.

Required Skills & Experience

• 10+ years of experience in IAM, automation engineering, or cloud identity management.
• Strong handson experience with Azure Functions, Microsoft Graph API, Entra ID (Azure AD), and REST APIs.
• Experience managing Service Principals, Managed Identities, and gMSAs.
• Strong understanding of OAuth/OIDC, RBAC, API permissions, delegated/application permissions, and Entra governance.
• Proficiency in PowerShell, Python, or similar scripting/development languages.
• Experience with Unit Testing, SIT/UAT coordination, and CI/CD deployment practices.
• Strong troubleshooting, problemsolving, and stakeholder collaboration skills.