Senior Authentication Engineer (Entra)

Join the NBCUniversal Operations and Technology (O&T) team and help drive strategy for the growing Identity and Access Management (IAM) service portfolio. The Authentication Engineer is responsible for the design, implementation, operation, security, and continuous improvement of enterprise authentication services that protect NBCUniversal’s workforce, applications, data, and digital assets. This role serves as a technical expert for identity authentication technologies, ensuring highly available, secure, and scalable authentication platforms across cloud, on-premises, hybrid, and SaaS environments. The successful candidate will partner with Identity and Access Management (IAM), Cyber Security, Infrastructure, Application Development, and Workplace Technology teams to deliver modern authentication capabilities, strengthen the organization’s security posture, and provide an exceptional user experience. Responsibilities Design, implement, and manage enterprise authentication services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Passwordless Authentication, Adaptive Authentication, and Federation services. Administer and support Microsoft Entra ID Authentication services and related identity platforms. Lead the deployment and adoption of modern authentication methods, including FIDO2 security keys, Windows Hello for Business, passkeys, certificate-based authentication (CBA), and passwordless solutions. Develop and maintain authentication standards, reference architectures, procedures, and operational runbooks. Strengthen the enterprise security posture by implementing authentication controls aligned with Zero Trust principles. Partner with Cyber Defense teams to investigate authentication-related security incidents. Analyze authentication telemetry, identify suspicious sign-in activity, and recommend mitigation strategies. Evaluate and implement new authentication technologies, security enhancements, and industry best practices. Ensure authentication platforms achieve high availability, resiliency, disaster recovery readiness, and operational excellence. Monitor service health, performance, capacity, and adoption metrics. Lead root cause analysis and problem management activities for service outages and incidents. Drive automation initiatives to improve operational efficiency and service quality. Design and support authentication integrations for SaaS, cloud-native, on-premises, custom, and third-party applications. Collaborate with application teams to onboard applications using standards such as SAML, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and SCIM. Contribute to enterprise authentication roadmaps and modernization initiatives. Identify opportunities to eliminate legacy authentication methods and adopt secure modern alternatives. Develop technical documentation, architecture diagrams, and implementation guidance.