Cloud Identity Engineer

At Bcore, our strength comes from how we deliver impact to the mission.

Whether it’s architecting critical IT solutions, producing actionable intelligence, or developing cutting edge technology, we succeed because of the expertise, collaboration, and agility of our teams.

Our Mission Services division combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support.

Bcore accelerates decisive advantage for warfighters and intelligence professionals by fusing human insight, rapid-fire engineering, precision-measured outcomes, and relentless grit into mission-ready solutions.

Do you want to join a team that is building tailored technical solutions to modernize our government’s mission and our client’s business?

Do you have a desire to change how people work?

Are you interested in helping to protect our nation’s cyber interests?

Join our growing team supporting customer missions as a Cloud Identity Engineer in Herndon, Virginia .

• Design and implement identity solutions using Microsoft Entra ID (formerly Azure AD), including hybrid identity setups and federation services like ADFS.
• Configure and maintain Conditional Access policies to enforce security and compliance across users, devices, and applications.
• Manage entitlement group systems to ensure proper role-based access control (RBAC) and lifecycle automation.
• Leverage security tools such as Defender for Identity and Azure Identity Protection to detect and respond to identity-based threats.
• Support Zero Trust principles by enforcing least privilege access and continuous verification across identity workflows.
• Troubleshoot and resolve IAM issues , including authentication failures, access anomalies, and policy misconfigurations.
• Collaborate with cross-functional teams to align identity strategies with business requirements and regulatory standards.
• Document identity architectures and procedures to support operational continuity and knowledge sharing.
• Stay current with identity protocols like OAuth 2.0, OpenID Connect, SAML, and SCIM, and integrate them into secure solutions.

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 11+ years of experience in designing, implementing, and managing large-scale Azure and M365 environments.
• Strong technical skills in Azure and M365, including: Azure Active Directory (AAD) Azure Information Protection (AIP) Microsoft 365 Security & Compliance Azure Storage Azure Security Center Azure Monitor PowerShell Azure CLI Microsoft Sysinternals Toolsuite Role based access control Conditional Access and MFA FSLogix Profiles Azure Virtual Desktop (AVD)

• Azure Storage

• Azure Monitor
• PowerShell
• Azure CLI

• Role based access control
• Conditional Access and MFA
• FSLogix Profiles

• Excellent communication and collaboration skills, with the ability to work with cross-functional teams and stakeholders.
• Strong problem-solving skills, with the ability to troubleshoot and resolve complex Azure and M365 issues.
• Certifications in Azure and M365, such as Microsoft Certified: Identity and Access Administrator Associate.

• Familiarity with Azure, Microsoft 365, and Active Directory Domain Services (AD DS)
• Experience with PowerShell and Kusto Query Language (KQL)
• Certifications: Azure Solutions Architect Expert Microsoft 365 Certified: Enterprise Administrator Expert

• The expected salary range within the Washington, DC metropolitan area is: INSERT-THE-RANGE . Final compensation is unique to each individual and will be determined based on factors such as experience, education, geographic location, and contractual requirements. This is not a guarantee.
• Benefits include Health/Dental/Vision, 401(k), Paid Time Off, STD/LTD/Life Insurance/Voluntary Life Insurance, Stipends, Referral Bonuses, and more.

BCore is proud to be an equal opportunity workplace.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.