Identity Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and refine the organization's enterprise identity and access management (IAM) strategy.

• Act as the technical leader for Microsoft Entra ID, focusing on identity governance, authentication modernization, and passwordless initiatives.

• Provide support for TPM-backed authentication, FIDO2 security keys, and Windows Hello for Business.

• Collaborate with security, infrastructure, cloud, and business teams to create scalable identity solutions.

• Enhance security measures, support compliance mandates, and improve user experience.

• Broaden support for IAM, Zero Trust, privilege management, and identity governance initiatives throughout the enterprise.

• Engage in practical identity architecture tasks.

• Work with HR, IT, Business Systems, application vendors, and business stakeholders via virtual meetings and communication tools.

• Occasionally travel for company meetings, training, project activities, or other business purposes.

⛳️ Requirements

• Over 10 years of experience in Identity and Access Management (IAM), Information Security, Infrastructure Engineering, or related fields.

• At least 3 years of experience in designing and implementing enterprise IAM architectures.

• Required: Extensive knowledge of Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and Hybrid Identity.

• Required: Practical experience in deploying and supporting FIDO2 authentication, Windows Hello for Business, and TPM-backed authentication solutions.

• Strong understanding of Zero Trust security principles and contemporary authentication protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.

• Experience with identity lifecycle management, role-based access control (RBAC), and privileged access management (PAM).

• Proficiency in integrating SaaS, cloud, and on-premises applications with centralized identity platforms.

• Familiarity with identity-related compliance and audit requirements, including SOX, SOC, and security control frameworks.

• Experience in designing identity solutions for hybrid and cloud-first environments.

• Strong skills in project management, documentation, communication, and stakeholder engagement.

• Preferred certifications: Microsoft Certified Identity and Access Administrator Associate (SC-300), Cybersecurity Architect Expert (SC-100), CISSP, or CISM.

• Highly preferred: Experience with future-state identity governance, access reviews, automated provisioning, privileged access controls, and enterprise IAM transformation initiatives.

• Compliance with relevant safety regulations, personal protective equipment (PPE) requirements, and Loenbro's Environmental Health and Safety (EH&S) policies.

🏝️ Benefits

• Medical, dental, and vision insurance

• 401(k) retirement plan with company match

• Paid time off (PTO) and holiday pay

• Life and disability insurance

• Professional development and training opportunities

• Employee assistance program (EAP)