Senior IAM Entra Architect

Charles Schwab Inc.•Southlake, TX

9d•$190,000 - $215,000•Onsite

About The Position

As a Senior IAM Entra Architect at Schwab, you will help shape the security, resilience, and future of the enterprise identity environment. Serving as a technical design authority, you will define target-state architectures, security guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services. You will guide complex architectural decisions involving authentication modernization, identity governance, application migration, privileged access, and Zero Trust principles. You will help teams balance security, regulatory requirements, operational resilience, scalability, and user experience. Working across Security Engineering, Cloud Platform Engineering, DevSecOps, Infrastructure, and application teams, you will turn complex identity challenges into actionable solutions and accelerate secure modernization while strengthening identity controls across Schwab’s technology environment. The role is intended to be performed on site at the specified location(s). The position is eligible for bonus or incentive opportunities in addition to the salary range.

Requirements

10 or more years of experience in Identity and Access Management architecture or engineering.
Deep experience designing enterprise identity solutions using Microsoft Entra ID, Active Directory, and hybrid identity technologies.
Experience with Conditional Access, Identity Protection, multifactor authentication, passwordless authentication, identity governance, and privileged access.
Experience designing secure authentication and single sign-on solutions using OAuth 2.0, OpenID Connect, SAML, or WS-Federation.
Experience securing hybrid identity environments using Entra Connect, federation services, lifecycle automation, and cloud-based identity patterns.
Experience developing Terraform infrastructure-as-code resources, reusable modules, and automated CI/CD guardrails for identity services.
Ability to apply Access Control Management, Cybersecurity, Risk Management, and Decision Making skills to produce secure, scalable, auditable identity solutions.
Demonstrated Problem Solving, Communication, and Cross-Functional Collaboration skills when guiding complex architecture and security decisions.

Nice To Haves

Microsoft SC-300, SC-100, AZ-305, or equivalent certification.
Experience with Privileged Access Workstations, Microsoft Identity Manager, SailPoint, CyberArk, or Okta.
Experience supporting enterprise identity consolidation, domain migration, or legacy authentication modernization initiatives.
Experience with threat modeling, penetration testing, security architecture, regulatory requirements, or identity-related audit controls.
Experience creating scalable automation through scripting, APIs, low-code/no-code platforms, programming languages, or AI technologies.
Adaptability and Continuous Learning demonstrated by evaluating emerging identity threats, platform capabilities, and technology changes.
Strategic Thinking and Stakeholder Management skills used to establish roadmaps, influence technical direction, and convert complex identity concepts into actionable guidance.
Experience mentoring engineers or establishing identity architecture standards and best practices.

Responsibilities

Define target-state architectures, security guardrails, reference patterns, and modernization roadmaps for Microsoft Entra ID, Active Directory, and hybrid identity services.
Guide architectural decisions involving authentication modernization, identity governance, application migration, privileged access, and Zero Trust principles.
Help teams balance security, regulatory requirements, operational resilience, scalability, and user experience.
Collaborate with Security Engineering, Cloud Platform Engineering, DevSecOps, Infrastructure, and application teams to turn identity challenges into actionable solutions.
Accelerate secure modernization and strengthen identity controls across Schwab’s technology environment.