Cloud IAM Architect

Job title: Cloud IAM Architect

Location: Hybrid (Must reside near approved hub locations such as Florida Dallas Louisville Washington DC New York City etc.)

Employment Type: 12 Months

Work Authorization: U.S. Citizen required. Must be eligible to obtain a security clearance.

Position Overview

We are seeking a Cloud IAM Architect to lead the design implementation and enhancement of enterprise identity and access management solutions focused on Microsoft Entra ID. This role will play a critical part in strengthening identity security standardizing IAM practices across multiple subsidiaries and supporting the organizations cloud growth strategy.

The ideal candidate will bring deep expertise in Microsoft Entra ID security architecture identity governance and cloud-based access management while remaining hands-on with engineering and implementation activities.

Key Responsibilities

• Design and architect secure Identity and Access Management solutions using Microsoft Entra ID (Azure AD).
• Lead the implementation and optimization of Conditional Access Privileged Identity Management (PIM) and identity governance controls.
• Architect and support multi-tenant Entra ID environments cross-tenant access and federation solutions.
• Review and analyze Entra ID sign-in logs audit logs and security events to identify risks and improve security posture.
• Collaborate with engineering teams and leadership to establish enterprise IAM standards and best practices.
• Drive cloud identity modernization initiatives and security enhancements across business units.
• Provide technical guidance and mentorship on IAM architecture and security controls.
• Support compliance audit and security clearance-related requirements as needed.

Required Qualifications

• 5 years of Identity and Access Management experience; 7 years preferred.
• Strong hands-on expertise with Microsoft Entra ID (Azure AD) architecture and security.
• Experience designing and implementing:
• Conditional Access policies
• Privileged Identity Management (PIM)
• Cross-tenant access and federation solutions
• Identity governance and access controls
• Experience analyzing Entra ID audit logs sign-in logs and security monitoring data.
• Ability to operate independently within complex enterprise environments.
• Strong communication documentation and stakeholder management skills.

Preferred Qualifications

• Experience with Azure cloud infrastructure and cloud security architecture.
• Hybrid Active Directory and Entra ID integration experience.
• Microsoft 365 administration and security experience.
• Certifications such as:
• CISSP
• CCSP
• Microsoft Identity and Access Administrator
• Azure Security Engineer or related Azure certifications

Additional Information

• Hybrid work model with onsite attendance expected approximately 1 2 days per week.
• Must reside near an approved hub location for future conversion opportunities.
• High-visibility role supporting enterprise-wide cloud identity and access management initiatives.
• Opportunity to influence IAM strategy and security standards across multiple subsidiaries.