Job Overview
The Microsoft Azure Cloud IAM Architect will lead the migration of identity and access management IAM solutions from SailPoint Identity Security Cloud to Microsoft Entra ID This role involves assessing existing SailPoint configurations designing migration strategies and implementing Entra IDbased identity governance solutions to ensure secure compliant and efficient identity management across hybrid and cloud environments
Key Responsibilities
Migration Planning and Assessment
oConduct a comprehensive analysis of existing SailPoint IdentityIQ or Identity Security Cloud configurations including users roles groups policies and workflows
oMap SailPoint identity governance features eg provisioning access certifications to equivalent Microsoft Entra ID capabilities
oIdentify dependencies custom configurations and potential challenges in migrating from SailPoint to Entra ID
Solution Design and Architecture
oDesign migration strategies for transitioning identity data including users groups service principals and access policies to Entra ID
oArchitect Entra ID solutions leveraging Microsoft Graph APIs Azure RBAC and conditional access policies to replicate SailPoint functionality
oPlan hybrid identity architectures ensuring seamless integration between onpremises Active Directory and Entra ID during migration
Migration Execution
oConfigure Microsoft Entra ID connectors and APIs to import identity data from SailPoint ensuring data integrity and consistency
oMigrate user accounts group memberships and access policies including B2B guest users and B2C consumer identities to Entra ID
oImplement single signon SSO and multifactor authentication MFA in Entra ID to replace SailPoint SSO configurations
oTransition cloud governance features such as Azure Management Objects eg Management Groups Subscriptions Resource Groups to Entra ID
Access Management and Governance
oConfigure Entra ID rolebased access control RBAC using builtin and custom roles to align with SailPoints access control model
oSet up Entra ID Privileged Identity Management PIM for managing elevated access and replacing SailPoints privileged account management
oImplement automated access reviews policy enforcement and compliance reporting in Entra ID to maintain governance standards
Testing and Validation
oPerform endtoend testing of migrated identity data access policies and SSO configurations to ensure functionality and security
oValidate migration outcomes against business requirements addressing discrepancies in user access or policy enforcement
oTest hybrid identity synchronization using Azure AD Connect to ensure continuity between onpremises and cloud environments
Compliance and Security
oEnsure migrated configurations comply with organizational security policies and regulatory standards eg GDPR HIPAA SOC
oImplement Entra ID security features such as conditional access riskbased policies and custom security attributes to enhance identity protection
oDocument migration processes and configurations for audit and compliance purposes
Stakeholder Collaboration and Training
oCollaborate with security infrastructure and compliance teams to align migration plans with business objectives
oProvide training and documentation to endusers and administrators on Entra ID features and workflows postmigration
oWork with Microsoft and SailPoint support teams to resolve migrationrelated issues
PostMigration Optimization
oMonitor Entra ID performance and address API rate limits or integration issues using best practices like exponential backoff
oOptimize Entra ID configurations for scalability and efficiency ensuring alignment with longterm IAM goals
oDecommission SailPoint components postmigration ensuring a clean transition
Qualifications
Experience
o5 years of experience in identity and access management IAM with expertise in SailPoint and Microsoft Entra ID
oProven experience in migrating IAM solutions preferably from SailPoint to Entra ID or similar platforms
oHandson experience with Microsoft Graph APIs SCIM SAML and Azure AD Connect
Technical Skills
oDeep knowledge of Microsoft Entra ID including RBAC PIM and conditional access policies
oProficiency in SailPoint IdentityIQ or Identity Security Cloud including connector configurations and governance features
oExperience with PowerShell scripting REST APIs and JSON for identity data migration
oFamiliarity with Azure Management Objects and hybrid identity architectures
Certifications preferred
oMicrosoft Certified Identity and Access Administrator Associate
oSailPoint Certified IdentityIQ Engineer or equivalent
Soft Skills
oStrong analytical and problemsolving skills to address migration challenges
oExcellent communication and stakeholder management abilities
Skills
Mandatory Skills : Architecture Patterns and StylesAngularAnsibleJavaJavaScriptJenkinsKubernetesApplication ArchitectureApplication CoreSpringBootAzure DevOpsAzure FunctionsTerraformAzure Logic AppsAzure MonitorAzure Service BusAzure SQLGitlabC#.Net FrameworkAzure Cloud ArchitectureAzure FrontdoorEntity Framework (EF/EF Core)Azure App ServiceArchitectural Patterns