Job Description

Duration: 1+ Year

Work Location: Clearwater, FL (Remote- occasional onsite may be requested)



Required Certification: CJIS Certification (must be obtained prior to or during onboarding)

We are seeking a highly skilled Identity & Access Management (IAM) Migration Consultant to support our organization's migration from Okta to Microsoft Entra ID . The consultant will play a key role in modernizing our identity infrastructure, maximizing our investment in Microsoft's cloud identity platform, and helping transition services off legacy systems.

• Lead and support the migration of SAML/OIDC applications, authentication policies, and identity workflows from Okta to Microsoft Entra ID.
• Configure and optimize Conditional Access, Authentication Methods, Self-Service Password Reset (SSPR), and Multi-Factor Authentication (MFA) policies.
• Design and implement multi-tenant and B2C identity strategies .
• Support hybrid identity scenarios involving Active Directory (AD), Entra Connect, and cloud-first identity models .
• Set up and manage test tenants for validation, experimentation, and proof-of-concept work.
• Implement delegated administration and role-based access control (RBAC) in Entra and Microsoft 365, following least privilege principles.
• Assist with identity lifecycle management, including onboarding/offboarding and stale object cleanup.
• Collaborate with internal teams to implement Identity Governance (Access Reviews, Entitlement Management, Access Packages).
• Document configurations, processes, and migration plans.
• Provide guidance on best practices for secure remote access, identity lifecycle management, and decommissioning legacy systems.

(Candidates should provide details on their experience with each of the following, including references and years of experience.)

1. Strong hands-on experience with Microsoft Entra ID (formerly Azure AD) Conditional Access, MFA, SSPR, Authentication Methods, and Identity Governance.
2. Proven experience migrating identity services from Okta to Microsoft Entra .
3. Experience with test tenant setup and management for validation/experimentation.
4. Familiarity with delegating permissions in Entra and Microsoft 365 using least privilege models.
5. Practical experience with identity lifecycle management , including stale object cleanup.
6. Experience with hybrid identity environments (AD, Entra Connect, cloud-first).
7. Experience with multi-tenant and B2C identity configurations .
8. Strong PowerShell scripting for identity automation.
9. Experience with Microsoft Graph API and Entra ID custom extensions.
10. Strong programming/scripting skills (Java, Python, C#, Bash).

• Microsoft certifications (e.g., SC-300, SC-100, AZ-500).
• Knowledge of Zero Trust principles and secure access design.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent communication and documentation skills.
• DevOps experience.
• Experience with AWS IAM and AWS Managed AD .
• Experience with HR-as-Master identity management.
• Experience with Privileged Access Management (PAM) .

Required:

• CJIS Certification
• Microsoft Identity and Access Administrator Associate ( SC-300)

Preferred:

• Microsoft Security, Compliance, and Identity certifications (e.g., SC-100, AZ-500)

Job Tags

Similar Jobs