Senior Engineer​/Architect - Microsoft Entra Identity & Access Management; IAM) Security

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

NTT DATA's Client is currently seeking a Senior Architect / Engineer - Microsoft Entra Identity & Access Management (IAM) Security to join their team in Fort Worth, Texas.

The Senior Architect / Engineer – Microsoft Entra IAM Security is responsible for defining, designing, and engineering enterprise identity security solutions using Microsoft Entra  the broader Microsoft identity security ecosystem.

This role provides senior technical leadership for identity architecture, authentication, authorization, privileged access, identity governance, application access, and hybrid/cloud identity security. The architect establishes IAM security patterns and standards while also providing hands-on engineering leadership for complex implementations, migrations, integrations, and security remediation initiatives.

The position serves as a subject-matter expert for identity-centric Zero Trust security, partnering with cybersecurity, cloud, infrastructure, application, risk, compliance and enterprise architecture teams to reduce identity-related risk and protect access to critical enterprise resources.

• Define enterprise Microsoft Entra IAM security architecture, standards, reference architectures, design patterns, and engineering guardrails.
• Architect secure identity solutions across cloud, hybrid, multi-cloud, SaaS and on-premises environments.
• Develop and implement an identity-centric Zero Trust architecture, emphasizing continuous verification, least privilege, strong authentication, and risk-based access.
• Design enterprise Conditional Access strategies covering users, administrators, workloads, applications, devices, authentication strength, and risk.
• Architect phishing-resistant and passwordless authentication solutions using FIDO2/passkeys, Windows Hello for Business, certificate-based authentication, and other supported authentication methods.
• Design and govern Privileged Identity Management (PIM) and privileged-access models to minimize standing administrative privileges and enforce just-in-time access.
• Establish security architecture for workload identities, managed identities, service principals, application registrations, API permissions and secrets/certificate management.
• Architect secure application authentication and authorization using OAuth 2.0, OpenID Connect, SAML 2.0, SCIM, Microsoft Graph and modern authentication patterns.
• Design Entra  capabilities, including entitlement management, access reviews, lifecycle workflows, separation of duties, and automated identity lifecycle controls.
• Define security architecture for joiner, mover and leaver (JML) processes and ensure timely provisioning, modification and removal of access.
• Design and review hybrid identity security, including Active Directory integration, Entra Connect/Cloud Sync, authentication flows and protection of privileged identity paths.
• Lead IAM threat modeling and security architecture reviews for new applications, platforms, cloud services and major technology initiatives.
• Identify identity-related attack paths, excessive privileges, legacy authentication dependencies, insecure application permissions and other IAM security risks.
• Design controls for detecting and responding to identity compromise, credential theft, token abuse, risky sign-ins, privilege escalation and unauthorized access.
• Define identity logging, monitoring and alerting requirements and integrate Entra telemetry with SIEM/SOC and security operations processes.
• Provide architecture and engineering leadership during complex identity security incidents and root-cause investigations.
• Develop automation using Microsoft Graph API, Power Shell, REST APIs and infrastructure-as-code/policy-as-code approaches to improve security consistency and reduce manual administration.
• Lead IAM modernization, tenant consolidation, authentication modernization, application migration and security-hardening initiatives.
• Evaluate new Microsoft identity capabilities and recommend adoption based on security benefits, operational impact, architectural fit, and organisational risk.
• Mentor IAM engineers and architects and provide technical leadership across IAM/security engineering teams.

• 4 years' experience with Microsoft Entra , including Conditional Access, PIM,…