Senior IAM Entra ID Architect

Role Overview

We are seeking a visionary and highly technical Senior IAM Entra ID Architect to lead the strategy, design, and modernization of our enterprise Identity and Access Management (IAM) ecosystem. In this role, you will serve as the principal authority on Microsoft Entra ID (formerly Azure AD) and hybrid identity frameworks.

You will architecture a robust, resilient, and compliant identity landscape, ensuring seamless user experiences while rigorously enforcing a modern Zero Trust security posture.

Core Responsibilities

1. Identity Architecture & Strategy

·         Define the enterprise identity roadmap, transitioning legacy architectures toward a mature Zero Trust Security Architecture.

·         Design and oversee the governance of tenant-wide configurations within Microsoft Entra ID.

·         Serve as the subject matter expert (SME) for merging, consolidating, or migrating identity environments during corporate restructuring or M&A activities.

2. Hybrid Identity Integration

·         Architect and maintain high-availability sync topologies linking on-premises Active Directory with cloud environments via Entra Connect / Cloud Sync.

·         Resolve complex synchronization challenges, identity lifecycle loops, and directory cleanup initiatives.

3. Access Management & Modern Authentication

·         Design, deploy, and continuously optimize advanced Conditional Access policies to guarantee contextual, risk-based security boundaries.

·         Architect seamless, secure access using Single Sign-On (SSO) and Multi-Factor Authentication (MFA) platforms (including passwordless and FIDO2 integration).

·         Integrate third-party SaaS, PaaS, and on-premises applications using modern protocols: SAML, OAuth 2.0, OIDC, and automated provisioning via SCIM.

4. Identity Governance & Administration (IGA)

·         Architect and enforce Identity Governance strategies, including structured access reviews, entitlement management, and lifecycle workflows.

·         Design and manage just-in-time (JIT) elevated access utilizing Privileged Identity Management (PIM) for directory and Azure resources.

5. Automation & Engineering

·         Develop robust enterprise-grade scripts using PowerShell and the Microsoft Graph API to automate identity provisioning, audit reporting, and configuration management.

·         Eliminate manual administrative overhead through Infrastructure as Code (IaC) or automated lifecycle pipelines.

Qualifications & Skills

Technical Requirements

·         Deep Microsoft Expertise: Elite-level knowledge of Microsoft Entra ID architectural patterns, premium features (P1/P2), and security cross-integrations.

·         Directory Services: Proven mastery of Active Directory Domain Services (AD DS), group policies, Kerberos, and hybrid integration patterns.

·         Protocol Mastery: Authoritative understanding of web-identity standards (SAML 2.0, OpenID Connect, OAuth 2.0) and automated provisioning methods (SCIM).

·         Developer Mindset: Highly proficient in utilizing Microsoft Graph API endpoints and writing production-ready PowerShell automation scripts.

·         Security Frameworks: Practical execution experience mapping IAM controls to Zero Trust principles, NIST frameworks, or CIS benchmarks.

Soft Skills & Leadership

·         Excellent communication skills with the ability to translate highly technical identity concepts into business risks/benefits for executive stakeholders.

·         Strong analytical and troubleshooting capability for complex, cross-domain authentication failures.

Preferred Certifications (A Plus)

·         Microsoft Certified: Identity and Access Administrator Associate (SC-300)

·         Microsoft Certified: Cybersecurity Architect Expert (SC-100)

·         CISSP (Certified Information Systems Security Professional)