Lead Entra ID / Azure AD Engineer

Job Description:

Job Description
BAE Systems, Inc. is seeking a Lead Entra ID Engineer to join our Identity Services organization, supporting the Directory Services, Certificate Management, and Privileged Access Management (DCP) team. This strategic role focuses on defining and implementing enterprise-wide standards and best practices for Microsoft Entra ID (formerly Azure AD) while collaborating across various departments and IT functions.

As a Lead Entra ID Engineer, you will be responsible for the governance, engineering, and maintenance of our Entra ID environment. You’ll lead initiatives around identity modernization, enforce security and compliance standards, and work closely with stakeholders to implement access controls and authentication mechanisms. This is a high-impact, cross-functional role for someone with deep technical expertise and strong communication skills.Responsibilities Include:

Lead the design, implementation, and continuous improvement of Entra ID (Azure AD) configurations, including:
- User, group, and role management
- Conditional access policies
- Enterprise Applications
- Authentication methods
Partner with internal teams to enforce governance and security standards across Identity Services.
Work with compliance teams to ensure identity systems meet regulatory and audit requirements (e.g., NIST, DFARS, CMMC).
Automate identity-related tasks using PowerShell and Graph API.
Document processes, standards, and architecture diagrams (e.g., using Visio).
Provide input and leadership in strategic planning related to directory services.
Support integrations with related services such as OpenText IDVault, PAM tools, etc.
Mentor junior engineers and collaborate across Identity Services teams and external business units.

Job Requirements:

Required Education, Experience, & Skills
Required Education:

Bachelor's degree in CS, IT or an Engineering disciplineRequired Skills & Experience:

3+ years of hands-on experience managing and engineering Microsoft Entra ID (Azure AD).
Strong experience with PowerShell scripting and Microsoft Graph API for automation and administrative tasks.
3+ years of experience with Active Directory in enterprise, multi-domain environments.
Solid understanding of Windows Hello for Business, including deployment and policy configuration.
Knowledge of compliance frameworks such as CMMC, DFARS, and NIST.
Experience with ServiceNow for incident/request handling or workflow integration.
Strong written and verbal communication skills; capable of working with cross-functional teams.

Preferred Education, Experience, & Skills
Preffered Education:

Master's degree in CS, IT or an Engineering discipline

Preferred Qualifications:

Microsoft Certification in Azure/Entra ID.
Experience with Splunk for identity log monitoring and alert/report creation.
Experience with Visio for technical documentation, including architecture diagrams and workflows.
Familiarity with other Identity Services tools (SailPoint, OpenText, Okta, Ping, Secret Server, CyberArk, BeyondTrust, etc.)

Pay Information
Full-Time Salary Range: $115779 - $196825

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Job Ident #: 115215BR

Company Details

BAE Systems

1601 Research Blvd
Rockville, Maryland 20850 USA
www.baesystems.jobs

BAE Systems is a premier global defense and security company with approximately 100,000 employees delivering a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions...

Benefits:
Competitive

Supported Manufacturers:
Various

Supported Models:

(Job and company information not to be copied, shared, scraped, or otherwise disseminated/distributed without explicit consent of JSfirm, LLC)

Job Info

Location

Falls Church, Virginia, United States

Type

Permanent

Company Details

BAE Systems

1601 Research Blvd
Rockville, Maryland 20850 USA
www.baesystems.jobs