Principal Entra ID Architect

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Design, implement, and oversee company Microsoft Entra ID tenants.

• Enhance the corporate IT strategy to lessen dependency on Active Directory through secure cloud-based identity solutions.

• Provide senior-level security architecture and strategic direction for corporate Active Directory environments.

• Establish and manage tenant directory baselines, roles, permissions, consent management, and least-privilege frameworks.

• Create automated workflows for the review and approval of sensitive permission requests.

• Implement disaster recovery strategies and application access reviews for tenants.

• Secure application secrets and certificates utilizing corporate PKI and Azure Key Vault.

• Design and enforce Conditional Access policies based on user behavior, location, device, and risk signals.

• Conduct threat modeling and risk assessments concerning authentication and authorization processes.

• Monitor application and service-principal activity through Microsoft Sentinel, Azure Monitor, and Entra ID audit logs.

• Define and maintain the enterprise identity architecture utilizing Microsoft Entra ID.

• Drive the adoption of OAuth, OIDC, SAML, FIDO2, and passwordless authentication methods.

• Implement identity lifecycle automation with Entra ID Governance, PIM, and Access Reviews.

• Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations.

• Integrate both SaaS and internal applications with Entra ID for SSO and SCIM provisioning.

• Support MFA, passwordless authentication, and enhancements to secure sign-in processes.

• Oversee Active Directory architecture, security, privileged access, resilience, and operational standards.

• Collaborate with Active Directory engineering and operations teams to ensure secure, resilient, and recoverable directory services.

• Architect secure integrations between Active Directory and Microsoft Entra ID across hybrid identity services.

• Evaluate architectural risks and legacy dependencies while guiding remediation and modernization efforts.

• Lead structured problem-solving initiatives for intricate identity and security issues.

• Develop target-state architectures and prioritized roadmaps that balance security, availability, supportability, cost, and business needs.

• Provide senior architectural guidance and escalation support for Active Directory and hybrid identity challenges.

• Align security, engineering, operations, governance, leadership, and business unit teams.

• Track and communicate progress, dependencies, risk mitigation, and business impact.

• Monitor identity threats, Microsoft security capabilities, regulatory requirements, and industry standards.

⛳️ Requirements

• Bachelor’s degree or equivalent and at least 8 years of relevant experience.

• A minimum of 5 years of experience focused primarily on Microsoft Azure/Entra ID.

• Experience in an engineering or architectural role overseeing Microsoft Entra ID, Active Directory, and hybrid identity environments.

• Proven track record in implementing conditional access, MFA, identity protection, and PIM.

• Practical experience with Entra Connect, Cloud Sync, federation, SSO, and application integrations.

• Experience in securing application registrations, service principals, and enterprise applications in both single and multi-tenant environments.

• Extensive expertise in Microsoft Entra ID, including Conditional Access, Entra Directory Configuration, Roles and Permissions, and Privileged Identity Management (PIM).

• Proven knowledge in PowerShell, Graph API, and automation, including the creation and modification of scripts for configuration settings and access reports.

• Strong comprehension of SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.

• Familiarity with Microsoft Graph API permissions, including Application and Delegated permissions and secure assignment practices.

• Eligibility for any necessary U.S. Government authorizations for access to export-controlled commodities and technology.

• 10 or more years of related experience is preferred.

• A Master’s degree is preferred.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Opportunities for professional development and growth.

• Flexible work arrangements and a supportive work environment.