Design, implement, and maintain Microsoft-based identity and access solutions (Azure AD/Entra, hybrid AD). Manage user lifecycle, RBAC, PIM/PAM, Conditional Access, MFA/SSO, and SSO integrations. Monitor identity threats with Defender for Identity and Sentinel, troubleshoot incidents, produce runbooks, and collaborate on compliance and IAM roadmap activities.