Senior Enterprise Cloud IAM Architect
About The Position
Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services throughout the organization's cloud environment. Serve as the subject matter expert for Microsoft Entra ID and cloud identity services, covering identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations. The role implements modern identity security controls and secure authentication and federation architectures, and manages cloud identity and access controls across AWS and Azure. It also leads governance of enterprise applications and privileged access, supports IAM governance, compliance, and risk management, and manages identity-security technologies and supporting infrastructure. The architect partners with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security, remediate IAM-related findings, and support secure cloud transformation initiatives.
Nice To Haves
- One or more preferred certifications: Microsoft Certified: Identity and Access Administrator Associate (Client-300).
- Microsoft Certified: Azure Security Engineer Associate (AZ-500).
- Microsoft Certified: Cybersecurity Architect Expert (Client-100).
- AWS Certified Security – Specialty.
- AWS Certified Advanced Networking – Specialty (preferred).
- Certified Identity and Access Manager (CIAM) or equivalent IAM certification.
Responsibilities
- Design, implement, and manage enterprise IAM solutions across Microsoft Entra ID, Azure, and AWS.
- Serve as the subject matter expert for Microsoft Entra ID and cloud identity services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
- Implement identity security controls including MFA, Conditional Access, Identity Protection, PIM, Access Reviews, Entitlement Management, and SSO.
- Design and support authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2.
- Manage AWS and Azure identity and access controls, including roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
- Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, secrets management, and privileged account controls.
- Drive IAM governance, compliance, and risk management through access certifications, RBAC, segregation of duties, audit readiness, and regulatory compliance initiatives.
- Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine/workload identities.
- Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to reduce reliance on long-lived credentials.
- Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
