Entra Hybrid Authentication, NPS, VPN & VDI Engineer

Primary Responsibilities

• Design, implement, and oversee hybrid authentication solutions utilizing Microsoft Entra ID (Azure Active Directory), including Azure AD Connect and cloud-based identity services.
• Establish and sustain the Network Policy Server (NPS) infrastructure for RADIUS authentication and network access control.
• Configure and manage virtual private network (VPN) solutions to ensure secure remote access while adhering to compliance and performance standards.
• Deploy, manage, and enhance virtual desktop infrastructure (VDI) environments to meet end-user computing needs.
• Conduct security assessments and vulnerability tests on authentication systems and network access controls.
• Diagnose and resolve complex issues related to hybrid authentication, network policies, VPN connectivity, and VDI performance.
• Maintain documentation of technical configurations, standard operating procedures, and architectural designs to support knowledge retention and compliance.
• Work in collaboration with infrastructure and security teams to ensure adherence to organizational security policies and best practices.
• Monitor system performance, apply patches, and execute regular maintenance activities to secure availability and integrity.
• Offer technical support and direction to IT personnel and end-users regarding authentication, VPN, and VDI services.

Qualifications We Seek

• A minimum of 5 years of proven experience in network engineering, infrastructure, or systems administration, with hands-on proficiency in hybrid authentication solutions.
• Extensive knowledge of Microsoft Entra ID (Azure AD), encompassing hybrid identity, synchronization, and modern authentication protocols.
• Strong expertise in Network Policy Server (NPS), RADIUS, and network access authentication frameworks.
• Demonstrated capability in designing and managing VPN solutions, including both site-to-site and remote access VPN technologies.
• Solid understanding of virtual desktop infrastructure (VDI) platforms, focusing on configuration and user experience optimization.
• Proficiency with Windows Server operating systems and Active Directory management.
• Familiarity with security protocols, SSL/TLS, multi-factor authentication (MFA), and conditional access policies.
• Ability to work autonomously and collaboratively within a team, effectively managing multiple priorities and technical challenges.
• Exceptional problem-solving abilities, with keen attention to detail and a commitment to thorough documentation.
• Excellent communication skills, capable of conveying technical concepts to non-technical audiences.
• Relevant certifications such as Microsoft Certified: Identity Engineer Associate, Cisco, CompTIA Network+, or equivalent are preferred.