We’re hiring: Senior Cloud Identity Engineer (Microsoft Entra ID) | Remote

Arvenda is connecting top LATAM talent with U.S.-based clients. We are recruiting a Senior Cloud Identity Engineer for a managed services provider and consultancy that has specialized exclusively in Identity and Access Management for more than 20 years. You will own the Microsoft Entra ID platform for a new client with a large hybrid Active Directory and Entra environment.

? Location: 100% Remote (LATAM)

⏰ Working Hours: Full-time (40 hours/week, Monday–Friday, 8:00 AM–5:00 PM Pacific Time)

? Contract Type: Independent Contractor (No PTO, requires own device/equipment)

? Core Tech / Industry: Microsoft Entra ID, IAM, SSO, PIM / IT Consultancy

What you’ll do:

- Design, configure, and operate Conditional Access, MFA and authentication methods, Privileged Identity Management (PIM), and Identity Protection.
- Onboard and troubleshoot application and SSO integrations, app registrations, and enterprise application consent.
- Run access reviews and manage entitlements as part of identity governance.
- Act as the primary technical contact for Entra: gather requirements, recommend designs, and lead working sessions with client stakeholders.
- Follow each client’s change management process and document decisions and configurations.
- Take on tickets, engineering,



and project work as directed by the client, occasionally assisting with Active Directory and hybrid identity work when it overlaps with Entra.

What we’re looking for:

- Hands-on production experience administering Entra ID at enterprise scale (thousands of users), including Conditional Access, MFA, PIM, and Identity Protection.
- Ability to run requirements and design meetings independently, in clear spoken and written English.
- Strict availability to work Pacific business hours reliably.
- SSO integration experience (SAML, OIDC/OAuth), app registrations, and enterprise applications.
- Access reviews, entitlement management, and identity governance fundamentals.
- Hands-on experience rolling out passkeys, FIDO2, and Temporary Access Pass.
- Microsoft SC-300 (Identity and Access Administrator) certification or equivalent.
- Must possess a reliable personal computer/device and a high-speed, stable internet connection to perform all duties.
- Bonus: HR-driven lifecycle provisioning workflows; External and guest identities (B2B); Device-aware access (Intune compliance); SIEM integration; Automation with Microsoft Graph and PowerShell; Working knowledge of hybrid identity (Entra Cloud Sync or Entra Connect).

📌 Cloud Identity Engineer (Argentina)
🏢 Oremota
📍 Argentina