Security Architect
Posted
Summary
Identity security architect role centered on Microsoft Entra ID and hybrid Active Directory: designing enterprise-scale PIM, Conditional Access and Access Reviews, Zero Trust and privileged-access architecture, phishing-resistant auth (FIDO2/passkeys), and defending against identity threats. Requires 10+ years of IAM/identity security experience.
Privileged Access & Identity Security Architect - Entra ID
We are looking for someone with deep identity security architecture expertise, particularly across Microsoft Entra ID and hybrid Active Directory.
What we need:
- 10+ years of IAM/Identity Security experience.
- Deep hands-on expertise in Entra ID and Active Directory security.
- Proven experience designing and rolling out PIM, Conditional Access and Access Reviews at enterprise scale.
- Strong understanding of Zero Trust and privileged-access architecture.
- Experience with phishing-resistant authentication including FIDO2, passkeys and Windows Hello for Business.
- Strong understanding of Tier 0 protection, Entra Connect/Cloud Sync and hybrid identity security.
- Ability to govern service principals, managed identities, app registrations and privileged API permissions.
- Strong understanding of identity threats including AiTM phishing, token replay, consent phishing, Kerberos attacks and DCSync.
- Ability to define identity policies and standards and drive their adoption across teams.