Job Description We are looking for 2 Entra ID Engineers (previously known as Azure AD) to join one of the big 5 banks on a 12-month contract plus extensions. This role is hybrid in Toronto, every Tuesday and 2nd Friday of the month.  • Work on projects related to:   ○ Workload Identity Enhancements    § Create an automated enterprise-wide deployment model.    § Deploy additional features for functional IDs in the cloud.    § Centralize governance and alerting on excessive permissions for thousands of workload identities.   ○ Lifecycle Management in Entra ID    § Develop and implement processes for provisioning (groups, roles, accounts/IDs) and updating Entra ID objects.    § Add new attributes to Entra ID objects to support identification, linking, and deprovisioning.    § Enhance existing Entra ID group management processes.    § Update ServiceNow catalog.   ○ Synchronize on-prem Active Directory with Entra ID for cloud integration. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/. Skills and Requirements • Expertise in Entra ID:   ○ Workload identities, SSO, service principals, admin units, infrastructure.   ○ Conditional access policies, lifecycle management.   ○ Strong architecture knowledge and ability to design end-to-end solutions.  • Hands-on engineering experience:   ○ Automating manual processes.   ○ Building, testing, and documenting technical solutions.   ○ Creating and managing workload identities, service principals, conditional access policies, Graph API permissions.  • Ability to lead initiatives, make recommendations, and drive projects independently.  • Excellent communication and presentation skills. • Experience with on-prem Active Directory and hybrid environments.  • Previous work in financial institutions or large enterprise environments. Scripting (SQL, Bash, Python)