Security Designer

We are hiring a Security Designer for 18 months contract on behalf of a well-established organization with offices in Montreal and Quebec City.

The Security Designer – Microsoft Entra ID is responsible for the detailed technical design and evolution of identity and access control solutions, with a strong focus on multi-factor authentication (MFA). Taking defined architectures and guidelines, this person translates them into concrete, secure, and actionable solutions, while clarifying and breaking down technical requirements to facilitate implementation by delivery teams.

The role combines design, technical expertise, and leadership - particularly around Microsoft Entra ID, conditional access policies, automation via Terraform, and identity service observability. The candidate also contributes to the evolution and maintenance of solutions, provides recommendations in response to security incidents, and ensures adaptability amidst increasingly rapid Microsoft update cycles.

Thanks to a strong mastery of Microsoft Entra ID, autonomy, and leadership, this person acts as a technical reference for the team, supporting them through the delivery and deployment of solutions and actively driving progress.

Key Expertise to Highlight

• Microsoft Entra ID: Design, configuration, security hardening, and platform evolution.
• Conditional Access: Design and governance of conditional access policies, with the ability to analyze their interactions and impacts.

Responsibilities & Required Skills

• Design and evolve identity, authentication, and access control solutions based on Microsoft Entra ID.
• Transform high-level architectures into detailed technical designs, configuration templates, and technical requirements for the delivery team.
• Design, rationalize, and evolve conditional access policies and rules, including their organization, dependencies, and impact on various user groups and applications.
• Automate and industrialize Entra ID configuration using Terraform, favoring an Infrastructure as Code (IaC) approach and reproducible deployments.
• Contribute to the integration of Terraform into CI/CD and DevSecOps practices, as well as the review of plans and changes prior to deployment.
• Design logging, monitoring, and observability mechanisms for identity services, leveraging data in Azure Monitor and Log Analytics to facilitate detection and diagnostics.
• Analyze complex identity and access incidents, identify root causes, and define sustainable fixes.
• Collaborate with the Solution Architect, Product Owner, security specialists, and delivery teams to ensure solution consistency.
• Conduct proofs of concept (PoCs) and technical validations when necessary to reduce unknowns before implementation.
• Participate in breaking down work, identifying dependencies and technical enablers, and enriching user stories with the details needed for execution.
• Produce and maintain design documentation, standards, templates, and technical guides necessary for the long-term viability of solutions.
• Monitor the evolution of Microsoft Entra ID, Terraform, and modern identity management and security practices.

Candidate Profile

• Bachelor’s Degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related field of equivalent level.
• 5+ years of IT experience, including significant hands-on experience with Microsoft identity technologies.
• Excellent mastery of Microsoft Entra ID.
• In-depth experience in designing and managing Conditional Access policies.
• Good command of Terraform and Infrastructure as Code, ideally applied to Entra ID.
• Experience with DevOps, DevSecOps, and CI/CD practices.
• Good command of Azure Monitor, Log Analytics, and KQL, particularly for analyzing identity and access events.
• Solid understanding of Microsoft Entra Connect and hybrid Active Directory–Entra ID environments.
• Solid understanding of core authentication mechanisms and application integration within Entra ID.
• Ability to analyze complex problems, conduct proofs of concept, and translate architectural guidelines into actionable solutions.
• Ability to produce clear technical documentation and simplify complex topics for various audiences.
• Autonomous, thorough, analytical mindset, with the ability to work effectively within multidisciplinary teams.

Assets (Nice-to-Have)

• Experience with Microsoft Intune and Windows Hello for Business.
• Experience with PowerShell and Microsoft Graph.
• Experience with Privileged Identity Management (PIM), workload identities, or app registrations in Entra ID.
• Relevant Microsoft certification (e.g., AZ-104 or an identity and security-focused certification).