About this role
Sr Identity Engineer
The Senior Identity Engineer – Operations designs, operates, and secures Microsoft Entra ID and its integrations across the enterprise. This role owns identity governance, Conditional Access, privileged access, application identities, and modern authentication controls, while serving as a senior escalation point for complex access and authentication issues. The engineer partners with security, platform, and regional teams to maintain resilient, least-privilege identity services and audit-ready operational standards.
Your Responsibilities
The Senior Identity Engineer – Operations designs, operates, and secures Microsoft Entra ID and its integrations across the enterprise. This role owns identity governance, Conditional Access, privileged access, application identities, and modern authentication controls, while serving as a senior escalation point for complex access and authentication issues. The engineer partners with security, platform, and regional teams to maintain resilient, least-privilege identity services and audit-ready operational standards.
Qualifications
-
Engineer, operate, and secure Microsoft Entra ID in an enterprise environment, including hybrid identity with Active Directory and Entra Connect, directory health, monitoring, and incident response.
-
Design, implement, and maintain Conditional Access policies enforcing MFA, device trust, sign-in risk, and Zero Trust principles across access scenarios.
-
Design and enforce identity standards that eliminate network-based trust assumptions, ensuring MFA and risk-based access controls are consistently applied.
-
Review, approve, and operationalize admin consent for third-party enterprise application integrations across the tenant.
-
Own enterprise application and service principal onboarding, enforcing least-privilege access models and secure authentication patterns.
-
Create, manage, and govern App Registrations, including secret and certificate lifecycle management, rotation standards, and expiration monitoring.
-
Design, and enforce least-privilege Microsoft Graph permission models for applications and identity automation.
-
Define and maintain standards that prevent interactive sign-in for service accounts, leveraging Conditional Access and non-interactive authentication models.
-
Define and enforce identity security guardrails for privileged access, MFA requirements, service accounts, and break-glass scenarios.
-
Implement and govern Microsoft Entra Privileged Identity Management (PIM) for administrative roles, just-in-time elevation, approval workflows, access reviews, and privileged access monitoring.
-
Design and administer Microsoft Entra Administrative Units to delegate identity and user management with scoped administrative control across regions, business units, and support teams.
-
Operate and evolve modern authentication and MFA methods globally, aligning with Microsoft Entra Authentication Methods and organizational security standards.
-
Support and standardize passwordless authentication approaches, including FIDO2 and hardware security keys, across regions and business units.
-
Support B2B, B2C, cross-tenant, and external identity scenarios for partners, vendors, and client-facing platforms.
-
Partner with platform, security, and Azure engineering teams to design and deliver secure Azure access models, role assignments, and identity integrations.
-
Act as the escalation point for complex identity-related incidents, authentication failures, and access issues.
-
Produce audit-safe documentation and evidence supporting security, compliance, and regulatory requirements.
-
Demonstrate a strong understanding of Microsoft 365 (M365) and its identity integrations with Entra ID, including authentication flows, access controls, and tenant-level governance considerations.
-
Equal Opportunity Statement
-
Lockton Companies is proud to provide everyone an equal opportunity to grow and advance. We are committed to an inclusive culture and environment where our people, clients and communities are treated with respect and dignity.
-
At Lockton, supporting diversity, equity and inclusion is ingrained in our values, and we believe that we are at our best when we fully embrace everyone. We strive to cultivate a caring culture that learns from, celebrates and thrives because of our breadth of differences. As such, we recognize that recruiting, developing and retaining people with diverse backgrounds and experiences is vital and enabling our people to thrive personally and professionally is critical to our long-term success.
-
About Lockton
-
Lockton is the largest privately held independent insurance brokerage in the world. Since 1966, our independence has allowed us to serve our clients, take care of our people and give back to our communities. As such, our 13,100+ Associates doing business in over 155 countries are empowered to do what’s right every day.
-
At Lockton, we believe in the power of all people. You belong at Lockton.
-
How We Will Support You
-
At Lockton, we empower you to be true to yourself in all that you do. Your success is our success, and we provide opportunities to help you grow and create a rewarding career path, however you envision it.
-
We are ready to meet you where you are today, and as your needs change over time. In addition to industry-leading health insurance, we offer additional options to support your overall health and wellbeing.
-
No Agencies Please
-
No Agencies Please
-
Any Employment Agency, person or entity that submits an unsolicited resume to this site does so with the understanding that the applicant's resume will become the property of Lockton Companies, Inc. Lockton Companies will have the right to hire that applicant at its discretion and without any fee owed to the submitting Employment Agency, person or entity. Employment Agencies, who have fee Agreements with Lockton Companies must submit applicants to the designated Lockton Companies Employment Coordinator to be eligible for placement fees.
-
Similar Vacancies
-
Market Operations Analyst
-
Location: Kansas City, United States of America
-
Full Lifecycle Data Engineer
-
Location: Kansas City, United States of America
-
Sr Exchange & Infrastructure/Storage Engineer
-
Location: Kansas City, United States of America
-
Sr MS365 Engineer - Copilot & Power Platform Opera...
-
Location: Kansas City, United States of America
-
Life at Lockton
-
August 28, 2026
-
18 Years as a Best P...
-
If you’re looking for a place to grow, lead, and do work that matters, take a closer look at Lockton. For the 18th consecutive year, Lockton has been named one of the Best Places to Work in Insurance—a recognition that reflects the people-first culture our Associates help build every day. At Lockton, independence gives us the freedom to invest in what matters most: our people. As the world’s largest privately held independent insurance brokerage, we offer the energy of an entrepreneurial company with the stability, scale, and opportunity of a global business. Own your career. Help build what’s next. Whether you are launching your career or bringing years of experience, Lockton is a place where you can keep growing. Associates are encouraged to bring ideas forward, take ownership, and shape meaningful careers in an environment built on trust, inclusion, and empowerment. Do work that makes an impact Our Associates help clients solve complex challenges, support their communities, mentor one another, and build a business they are proud of. Here, purpose and performance go hand in hand—and the work you do can make a difference for clients, colleagues, and communities. Feel supported at work and beyond We know great work starts with people who feel supported. Lockton offers competitive benefits, wellness resources, and flexibility designed to help Associates thrive professionally and personally. Grow without limits From early-career programs to leadership development, mentorship, professional training, and opportunities across more than 150 offices worldwide, Lockton gives Associates room to learn, lead, and keep moving forward. Our entrepreneurial culture empowers people to think boldly, act with ownership, and grow with purpose. Ready to build your career at one of the best? If you want a career where your voice matters, your growth is supported, and your work