Project Description
The State of Connecticut Judicial Branch is seeking an experienced Azure engineer to design and implement custom identity solutions using Microsoft Entra. The ideal candidate will help us extend our identity platform with custom logic, automate identity
workflows, and ensure seamless integration between our internal systems and external users, including law enforcement agencies. This role will involve building secure, scalable, and policy-compliant solutions using Microsoft Entra's extensibility features
such as Custom Authentication Extensions, and Event-Driven Azure workloads.
Scope of Services
- Implement and manage Microsoft Entra External ID Custom Authentication Extensions to integrate with custom APIs, app services, approval workflows, and lifecycle events for B2B and B2C users.
- Ensure robust error handling, logging, and monitoring.
- Collaborate with external stakeholders to interpret legal and governance requirements and translate them into enforceable technical solutions.
- Document solution architecture and identity workflows using Visio or similar tools and actively contribute to improving identity governance processes.
- Create and manage multi-tenant Azure resources and identities.
Minimum Qualifications
- Strong recent hands-on experience with .NET in production environments.
- Deep understanding of Microsoft Entra ID / Azure AD, External ID and identity federation principles.
- Experience implementing Entra Enterprise Application roles for authentication and authorization.
- Experience with Microsoft Graph API, RESTful services, and secure API design.
- Familiarity with claims-based authentication.
- Solid understanding of identity governance concepts including access reviews and entitlement management.
- Knowledge of OAuth 2.0, OpenID Connect, and token customization.
- Experience in secure development practices and compliance-driven environments (e.g., CJIS, NIST).
- Excellent communication and documentation skills.
Preferred Qualifications
- Experience in integrating identity solutions with external entities (e.g., government agencies or law enforcement).
- Experience with creating self-service sign-up user flows in Entra ID.
- Knowledge of Azure services like Key Vault, and API Management.
- Experience with Entra app proxy/Azure Front Door
- Familiarity with CI/CD pipelines and infrastructure as code.
- Experience with Azure DevOps for securely deploying code.
- Relevant Microsoft Certifications, such as:
- Microsoft Certified: Identity and Access Administrator Associate
- Microsoft Certified: Azure Solutions Architect Expert
Timetable
The selected candidate may be able to join the ITD team as soon as the onboarding process is completed. A duty station will be assigned at ITD in East Hartford, with opportunities for hybrid remote work (3-days on-site and 2 days remote) and a work
schedule of 40 hours per week. The position may be renewed periodically based upon a consultant's performance and the availability of funding. On-site attendance is mandatory on designated in-office days at the Judicial Branch Information Technology
Division in East Hartford. The role also requires availability for after-hours on-call support as needed in the event of system emergencies, and occasional weekend work will be scheduled for system maintenance and upgrades
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.