Microsoft 365​/Entra Identity Engineer

Description

The FedCivIT Sector at Leidos currently has an opening for an Entra Engineer to work in our Washington, DC office. This is an exciting opportunity to use your Entra and Identity Management experience helping our Federal Millenium Challenge Agency mission to help in planning and executing their future identity planning needs. In this mission we are seeking a senior‑level engineer with deep expertise in Microsoft 365 and Entra to lead the design, implementation, and support of Zero Trust Architecture initiatives.

This role focuses on modern authentication, phish‑proof multifactor, conditional access, and secure app provisioning, while also driving tenant hardening aligned with CISA and OMB standards. The ideal candidate brings over 8 years of hands‑on experience in complex Federal M365 environments, including advanced identity and access management, privileged access controls, SaaS integration, and enterprise‑level support in FISMA‑compliant settings. Strong understanding of the Government/Federal environment, communication skills and the ability to guide cross‑functional collaboration are essential.

• Lead engineering efforts to adopt Zero Trust Architecture methodologies applicable to Microsoft 365 and Entra, including:
• Modern Authentication
• Phish‑Proof Multifactor
• Application Gateway
• Conditional Access
• Single Sign‑On
• App Provisioning of User Identities
• Lead engineering efforts for Tenant hardening and secure configuration aligned with industry standards, specifically baselines outlined by the Cybersecurity and Infrastructure Security Agency (CISA) and Office of Management and Budget (OMB).
• Hands‑on maintenance and support of M365 / Entra platform, including remediation/methodical troubleshooting of issues escalated by Tier 1 & 2 operational support teams.
• Lead engineering efforts to return MCC investment on M365 products such as Microsoft Defender and Intune.
• Lead engineering efforts to enhance MCC's on‑premises Microsoft technology stack, such as enhancements to Active Directory, Certificate Services, Windows Server/Desktop Operating Systems, and Cloud connectors linking on‑prem to hosted environments.

• 8+ years of experience with conditional access, identity governance, privileged access management, and privileged access workstations
• 8+ years of experience designing, implementing and supporting highly complex M365 services across Entra / Azure AD, Exchange Online, Teams, Intune, and Defender.
• 5+ years designing and implementing identity and access management systems including Architecture of Entra / Azure AD with conditional access and MFA policies
• 5+ years of experience managing Privileged Identity Management (PIM), Just‑in‑Time (JIT) access.
• 5+ years of experience administering SaaS and application integration with Azure AD / SSO, including custom applications' SSO integration and migrations from ADFS.
• 5+ years of experience managing Microsoft Graph / Office 365 APIs.
• 5+ years' experience providing enterprise support within a FISMA compliant environment.
• Proficient written and verbal communicator. Possesses soft people skills and grasps enterprise information technology methodologies.
• Microsoft Certified:
  Security, Compliance and Identity Fundamentals
• CompTIA Advanced Security Compliance Practitioner (CASP)
• Must be a US Citizen

• Prior experience supporting an internationally‑based federal agency
• SC-300:
  Microsoft Identity and Access Administrator Associate certification or equivalent
• MS-500:
  Microsoft 365 Security Administratorcertification or equivalent

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:
November 5, 2025

For U.S. Positions:
While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days…