Senior Infrastructure Engineer, M365 & Identity

Position Summary:

We are seeking a Infra Engineer III, M365 & Identity to own Forgent's Microsoft identity and productivity platform across all sites. This role is the single point of accountability for Entra ID, Conditional Access, Privileged Identity Management, and the full suite of Microsoft 365 security and compliance capabilities unlocked by our E5 licensing.

You will be joining at a pivotal moment — Forgent is migrating from a fragmented multi-entity Microsoft 365 environment to a single governed platform with a July 1 go-live deadline. This role will be critical to ensuring that deadline is met, and that identity and access are properly governed across the entire organization from day one.

Key Responsibilities:

Identity & Access Governance

• Own and operate Entra ID (Azure Active Directory) across all Forgent entities — users, groups, roles, and licensing
• Design and enforce Conditional Access policies aligned to Zero Trust principles — risk-based access, phishing-resistant authentication, and named location controls
• Implement and manage Privileged Identity Management — just-in-time role activation, access reviews, and least-privilege enforcement for all admin roles
• Manage Self-Service Password Reset with password writeback in the hybrid Active Directory and Entra ID environment
• Own Entra Connect and hybrid identity sync health — ensure clean, reliable synchronization between on-premises Active Directory and Entra ID
• Lead Entra ID Governance — access reviews, entitlement management, and lifecycle workflows across all entities

Security & Threat Protection

• Deploy and manage Defender for Identity — sensor deployment on all domain controllers, alert triage, and integration with Defender XDR for unified identity threat detection
• Configure and maintain Microsoft Purview Data Loss Prevention policies — protect sensitive data across Exchange Online, SharePoint, Teams, and endpoints
• Manage Intune compliance and configuration policies — enforce device compliance requirements for Conditional Access integration
• Serve as the identity subject matter expert for security incidents involving compromised accounts, privilege escalation, or unauthorized access

Single Sign-On & Application Integration

• Own and operate enterprise Single Sign-On across all corporate applications using Entra ID as the identity provider
• Configure and manage SSO integrations — SAML 2.0, OAuth 2.0, and OpenID Connect — for all business-critical applications across all entities
• Onboard new applications to the Entra ID application gallery and enterprise app catalog, ensuring consistent authentication and access policies
• Implement and manage application-level Conditional Access policies — enforce multi-factor authentication, device compliance, and risk-based controls per application