Infrastructure Security, IAM Architect

This is a fully remote position, open to applicants in India.

📋 Description

• Develop the target identity architecture for on-premises Active Directory and Microsoft Entra ID.

• Establish SSO, MFA, Conditional Access, and privileged access frameworks.

• Create directory synchronization strategies utilizing Microsoft Entra Connect and tenant coexistence.

• Design application sign-in and federation mechanisms using SAML, OAuth 2.0, and OpenID Connect.

• Architect network access authentication with RADIUS and 802.1X protocols.

• Define security controls for infrastructure, including segmentation, firewalls, and key management.

• Develop security controls and guardrails for landing zones across Azure and AWS environments.

• Choose and set up migration tools for transferring users, mailboxes, SharePoint, and Teams content.

• Produce both high-level and low-level designs and review them with client architects.

• Specify security logging requirements for identity and infrastructure-related events.

• Take ownership of the target-state design and technical strategy for migrating users, mailboxes, and collaboration content during a carve-out.

• Re-architect when necessary to ensure appropriate separation.

⛳️ Requirements

• Over 10 years of relevant experience in infrastructure and security architecture.

• More than 5 years of experience in designing and implementing identity solutions, including on-premises domain controller clusters.

• Strong knowledge of Active Directory, Kerberos, LDAP, and DNS.

• Comprehensive understanding of Microsoft Entra ID and Entra Connect version 2 or later, including Entra Domain Services.

• Practical experience with SSO, MFA, and Conditional Access.

• Experience with at least one third-party identity provider, such as Okta or Ping Identity.

• Over 3 years of experience with SAML and OAuth 2.0, in addition to OpenID Connect.

• Familiarity with RADIUS-based authentication and 802.1X protocols.

• Experience using migration tools like BitTitan, Quest, and AvePoint.

• Background in mailbox, SharePoint, Teams, and user migration.

• Experience with at least two cloud providers, specifically Azure and AWS.

• Proficiency in designing and implementing landing zones with appropriate security controls and guardrails.

• Experience with Azure Key Vault or similar key management solutions.

• Knowledge in designing colocation architectures.

• In-depth understanding of hyper-converged infrastructure.

• Exposure to at least two OEMs or two cloud providers across various technology areas.

• Excellent communication skills, with experience collaborating with UK and EU clients.

• Willingness to travel as necessary and to work within client time zones.

• Previous background in infrastructure alongside the specified specialization.

• Mandatory prior experience in IT consolidations, mergers, demergers, and carve-outs.

• Relevant professional certifications are highly recommended.

🏝️ Benefits

• Remote work flexibility.

• Willingness to travel as necessary.