Microsoft 365 / Entra Identity Engineer

The FedCivIT Sector at Leidos currently has an opening for an Entra Engineer to work in our Washington, DC office. This is an exciting opportunity to use your Entra and Identity Management experience helping our Federal Millenium Challenge Agency mission to help in planning and executing their future identity planning needs. In this mission we are seeking a senior-level engineer with deep expertise in Microsoft 365 and Entra to lead the design, implementation, and support of Zero Trust Architecture initiatives. This role focuses on modern authentication, phish-proof multifactor, conditional access, and secure app provisioning, while also driving tenant hardening aligned with CISA and OMB standards. The ideal candidate brings over 8 years of hands-on experience in complex Federal M365 environments, including advanced identity and access management, privileged access controls, SaaS integration, and enterprise-level support in FISMA-compliant settings. Strong understanding of the Government/Federal environment, communication skills and the ability to guide cross-functional collaboration are essential.

Primary Responsiblities:

• Lead engineering efforts to adopt Zero Trust Architecture methodologies applicable to Microsoft 365 and Entra, including:

• Modern Authentication

• Phish-Proof Multifactor

• Application Gateway

• Conditional Access

• Single Sign-On

• App Provisioning of User Identities

• Lead engineering efforts for Tenant hardening and secure configuration aligned with industry standards, specifically baselines outlined by the Cybersecurity and Infrastructure Security Agency (CISA) and Office of Management and Budget (OMB).

• Hands-on maintenance and support of M365 / Entra platform, including remediation/methodical troubleshooting of issues escalated by Tier 1 & 2 operational support teams.

• Lead engineering efforts to return MCC investment on M365 products such as Microsoft Defender and Intune.

• Lead engineering efforts to enhance MCC’s on-premises Microsoft technology stack, such as enhancements to Active Directory, Certificate Services, Windows Server/Desktop Operating Systems, and Cloud connectors linking on-prem to hosted environments.

Basic Qualifications:

• 8+ years of experience with conditional access, identity governance, privileged access management, and privileged access workstations

• 8+ years of experience designing, implementing and supporting highly complex M365 services across Entra / Azure AD, Exchange Online, Teams, Intune, and Defender.

• 5+ years designing and implementing identity and access management systems including Architecture of Entra / Azure AD with conditional access and MFA policies

• 5+ years of experience managing Privileged Identity Management (PIM), Just-in-Time (JIT) access.

• 5+ years of experience administering SaaS and application integration with Azure AD / SSO, including custom applications’ SSO integration and migrations from ADFS.

• 5+ years of experience managing Microsoft Graph / Office 365 APIs.

• 5+ years’ experience providing enterprise support within a FISMA compliant environment.

• Proficient written and verbal communicator. Possesses soft people skills and grasps enterprise information technology methodologies.

• Microsoft Certified: Security, Compliance and Identity Fundamentals

• CompTIA Advanced Security Compliance Practitioner (CASP)

• Must be a US Citizen

Preferred Qualifications

• Prior experience supporting an internationally-based federal agency

• SC-300: Microsoft Identity and Access Administrator Associate certification or equivalent

• MS-500: Microsoft 365 Security Administrator certification or equivalent

We’re not looking for perfectly polished resumes or perfect fits. We’re looking for people who break limits, ask hard questions, and don’t wait to be told what’s next. At Leidos, we’re not following the roadmap — we’re redrawing it.

Original Posting:

November 5, 2025

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $126,100.00 - $227,950.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.