Summary of Role: We are seeking a Entra ID & AD Architect (SME) driving design, security, and operations of hybrid identity. Senior individual contributor owning architecture and escalations. Delivering resilient, scalable identity in collaboration with security and cloud teams.
Essential Responsibilities:- Own the end-to-end architecture for hybrid identity spanning on-premises Active Directory, Entra ID, and Entra Connect / Cloud Sync.
- Design and document target-state identity reference architectures, including authentication flows, trust topologies, forest/domain design, and tenant strategy.
- Configure and optimize Entra ID capabilities: SSO/SAML/OIDC federation, application registrations & enterprise apps, App Proxy, B2B/B2C, dynamic groups, and Entra ID Governance (access reviews, entitlement management, lifecycle workflows).
- Automate identity operations using PowerShell and Microsoft Graph API
- Partner with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response for identity-based attacks (Golden Ticket, password spray, token theft, etc.).
- Act as Tier 3 / final escalation for complex identity incidents and outages.
- Establish standards, best practices, and guardrails; review designs from junior engineers and vendor partners.
- Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, and architecture decision records.
- Mentor engineers and uplift the broader team's identity capability through knowledge transfer and design reviews.
Other Responsibilities:- Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
- Builds trust across security, infrastructure, app, and cloud teams; influences without authority as an individual contributor.
- Team-first orientation - shares knowledge generously and mentors others rather than hoarding expertise.
- Diplomatic in handling competing priorities and pushing back on insecure or non-standard requests.
Required Qualifications:- Education - Bachelor in Computer Science or related field.
- Experience - Minimum 15 Years in field.
- Fluency in English Language - written & verbal
Preferred Qualifications:- Translates complex identity concepts into clear, audience-appropriate language - able to brief executives, write precise documentation, and guide hands-on engineers with equal ease.
- Strong written skills for architecture documents, runbooks, and decision records.
- Confident, respectful communicator in design reviews, incident bridges, and cross-team negotiations
- Ownership mindset - treats the identity platform as their own; sees problems through to root-cause resolution rather than handing them off.
- Proactive and self-directed; identifies risks and improvement opportunities without being asked.
- Calm, composed, and decisive under pressure during outages and security incidents.
- Humble and coachable - open to feedback and willing to say "I don't know, let me find out."
Expected Salary Range$124,000.00 - $208,000.00
The exact Salary will be determined based on qualifications, experience and location.
