Identity Architect

Role overview A senior technical leadership role focused on shaping and executing an enterprise-wide identity and access management (IAM) vision. The position is hands-on, partnering with security, infrastructure, cloud, and business teams to deliver scalable identity solutions that strengthen security posture, support compliance, and elevate the user experience. Initial focus centers on Microsoft Entra ID and modern authentication, with scope expanding into broader Zero Trust, privilege management, and identity governance initiatives.

Responsibilities - Design, implement, and continuously evolve the organization's enterprise IAM strategy and architecture. - Lead technical direction for Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management, Identity Governance, and hybrid identity configurations. - Drive authentication modernization through passwordless initiatives such as FIDO2 security keys, TPM-backed authentication, and Windows Hello for Business. - Develop Zero Trust-aligned identity controls and integration patterns across SaaS, cloud, and on-premises applications. - Collaborate with stakeholders across IT, HR, business systems, and external vendors to align identity solutions with compliance and operational needs. - Document architectures, roadmaps, and project plans while supporting privileged access management and identity lifecycle programs.

Requirements - 10+ years of experience in IAM, information security, infrastructure engineering, or a related discipline. - 3+ years designing and implementing enterprise-scale IAM architectures. - Deep, hands-on expertise with Microsoft Entra ID (Azure AD) and its core feature set, including PIM, Identity Governance, and hybrid identity. - Practical experience deploying FIDO2, Windows Hello for Business, and TPM-backed authentication. - Strong knowledge of Zero Trust principles and modern authentication protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP. - Familiarity with RBAC, privileged access management, identity lifecycle management, and compliance frameworks including SOX and SOC.

Nice to have - Certifications such as SC-300, SC-100, CISSP, or CISM. - Experience with access reviews, automated provisioning, and enterprise IAM transformation programs.

Benefits and work setup - Primarily remote/home office with regular virtual collaboration. - Occasional travel for meetings, training, or project activities. - Comprehensive benefits package including medical, dental, and vision insurance; 401(k) with company match; paid time off and holiday pay; life and disability insurance; professional development support; and an employee assistance program.