Principal Microsoft Entra ID Architect
Core
Design, implement, and govern Microsoft Entra ID tenants to ensure security, operational practices, and Zero Trust alignment.
Role type
Principal Microsoft Entra ID Architect
Builds
Enterprise identity architecture, Conditional Access policies, and automated identity lifecycle workflows
Domain
Cybersecurity / Identity and Access Management (IAM)
Required skills
Microsoft Entra ID, Active Directory, hybrid identity architectures, Conditional Access, Privileged Identity Management (PIM), PowerShell, Microsoft Graph API, modern authentication protocols (SAML, OAuth 2.0, OIDC, Kerberos, LDAP), SCIM provisioning, Azure Key Vaults, Microsoft Sentinel, Azure Monitor
Preferred skills
Master's degree, 7+ years related experience, deep expertise in Entra Connect, Cloud Sync, federation, SSO, application access reviews, threat modeling
Technologies
Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, Microsoft Sentinel, Azure Monitor, Azure Key Vaults, PowerShell, Graph API, SCIM, OAuth, OIDC, SAML, FIDO2, PIM
Responsibilities
Design architect and SME for corporate tenant directory baseline configurations; Govern roles, permissions, and consent management; Implement application access reviews; Design and enforce Conditional Access policies; Securely manage application secrets and certificates; Lead adoption of modern authentication; Implement identity lifecycle automation; Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations; Integrate third-party SaaS and internal applications for SSO and provisioning; Conduct threat modeling and risk assessments; Monitor application and service principal activity; Define and maintain enterprise identity architecture.
Seniority
Principal, hands-on IC with strategic influence