Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 33 days ago

M365 Engineer - Entra

The Clearing House24 open roles

Where
Charlotte Office
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowM365 Engineer - EntraThe Clearing House · Charlotte Office

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on The Clearing House's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. The Clearing House postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 33 days ago

The Clearing House median: 2 days open

The posting

Position summary:

We are seeking a highly skilled Microsoft 365 and Entra Identity Administrator to serve as the technical owner of our Microsoft cloud identity platform. This position will be responsible for the day-to-day administration, maintenance, optimization, governance, and security of Microsoft Entra ID, Conditional Access, authentication services, identity lifecycle management, and enterprise application integrations. The ideal candidate will possess deep expertise in modern identity and access management technologies, including SAML, OAuth, OpenID Connect (OIDC), Multifactor Authentication (MFA), and Single Sign-On (SSO), while maintaining strong knowledge of Active Directory, DNS, DHCP, Group Policy, and hybrid identity architecture. Experience supporting cloud platforms such as AWS is highly desirable.

About The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country’s first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.

Responsibilities

  • Serve as the primary administrator and technical owner of the Microsoft Entra ID environment.
  • Administer and maintain user lifecycle management, identity governance, authentication methods, and directory services.
  • Design, implement, and maintain enterprise identity and access management solutions.
  • Configure, support, and troubleshoot Single Sign-On (SSO) integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other modern authentication protocols.
  • Administer Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra.
  • Manage and optimize Multifactor Authentication (MFA) solutions, including Microsoft Authenticator, authentication strengths, passwordless authentication, and self-service password reset capabilities.
  • Develop and maintain Conditional Access policies aligned with security, compliance, and business requirements.
  • Monitor identity-related health, security posture, and access trends while proactively identifying opportunities for improvement and optimization.
  • Partner with application owners, cybersecurity teams, and vendors to integrate applications securely with Microsoft Entra ID.
  • Maintain and troubleshoot hybrid identity solutions including Entra Connect and Active Directory synchronization services
  • Administer and maintain Active Directory infrastructure, including users, groups, organizational units (OUs), delegation models, and directory services.
  • Design, implement, and troubleshoot Group Policy Objects (GPOs) to support security, compliance, and operational requirements.
  • Manage and maintain hybrid identity infrastructure supporting synchronization between Active Directory and Microsoft Entra ID.
  • Administer and troubleshoot Microsoft Entra Connect, synchronization services, identity provisioning, and directory-related issues.
  • Manage and maintain DNS and DHCP services supporting enterprise authentication and application connectivity.
  • Perform certificate lifecycle management activities, including certificate renewals, replacements, and troubleshooting for authentication, federation, and secure communications.
  • Support Public Key Infrastructure (PKI) and certificate-based authentication solutions where applicable.
  • Assist with identity-related disaster recovery planning, testing, and operational readiness activities.
  • Collaborate with infrastructure, cybersecurity, and application teams to ensure secure and reliable identity services across on-premises and cloud environments.
  • Monitor and maintain the health, availability, and performance of identity-related infrastructure components.
  • undefined

Qualifications

  • Strong expertise in Microsoft 365 administration, Microsoft Entra ID, hybrid identity, and directory services.
  • Deep understanding of authentication and federation technologies including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Single Sign-On (SSO), and Multifactor Authentication (MFA).
  • Experience administering and troubleshooting Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra
  • Strong understanding of Conditional Access, authentication methods, identity governance, and modern identity security practices.
  • Advanced knowledge of Active Directory, Group Policy, DNS, DHCP, Microsoft Entra Connect, and hybrid identity architectures.
  • Experience managing and troubleshooting identity synchronization between Active Directory and Microsoft Entra ID.
  • Knowledge of Public Key Infrastructure (PKI), certificate lifecycle management, and certificate-based authentication services.
  • Proficiency with PowerShell automation and Microsoft Graph API administration.
  • Knowledge of disaster recovery planning, testing, and validation methodologies, with willingness to participate in recovery exercises when required.
  • Experience supporting Microsoft Intune, endpoint management, and device-based access controls is a plus.
  • Familiarity with AWS identity integrations, IAM, and Amazon Route 53 DNS administration is preferred.
  • Must be comfortable working within a strict and highly governed change management environment.
  • Must be committed to maintaining security, risk, and compliance controls within a regulated industry environment.
  • Ability to create and maintain technical documentation, operational procedures, and knowledge transfer materials.
  • Demonstrated ability to troubleshoot complex technical issues, take ownership of problems, and drive resolutions through completion.
  • Excellent communication, analytical, and problem-solving skills.
  • Strong attention to detail, organizational skills, and operational discipline.

Work Conditions & Expectations

  • Hybrid Schedule: 3 days onsite (Charlotte NC preferred, occasional asks to report to Winston-Salem NC as needed); On-site work requirements can change at any time.
  • Operational Flexibility: Ability to perform after-hours changes and participate in on-call rotations when required.
  • Dynamic Environment: Work involves frequent troubleshooting, collaboration across teams, and adapting to evolving technologies.
  • Security & Compliance: Must adhere to strict Change Management processes and participate in security reviews as needed.
  • Standard Office Setup: Role primarily uses standard IT equipment (laptops, conferencing tools, monitoring systems) with occasional interaction with server rooms or networking hardware.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against The Clearing House's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on The Clearing House's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    The Clearing House's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.