IT Authentication Architect

As IT Authentication Architect you will be responsible for the operation, administration, support, and evolution of enterprise authentication and credential management platforms. The role focuses on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms,
multifactor authentication technologies
, and passkey-based authentication. The position works closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user-friendly authentication experiences across cloud and on-premises environments.

• Provides Level 3 support for enterprise identity and authentication services.
• Troubleshoots complex authentication, authorization, and credential-related issues.
• Administers and supports Microsoft Entra , authentication platforms, and directory-integrated services.
• Manages user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding.
• Supports passwordless and multifactor authentication solutions.
• Investigates authentication incidents and perform root-cause analysis.
• Works with service desk and Level 2 teams to resolve escalated issues.
• Administers, supports, and troubleshoots enterprise password management solutions including Bitwarden & KeePassXC.
• Supports password vaulting, credential sharing, access controls, auditing, and governance.
• Assists with adoption of secure credential management practices across business and technical teams.
• Supports and implements authentication technologies including Microsoft Entra , NetIQ Advanced Authentication, Yubi Key, Passkeys, FIDO2, Web Authn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business.
• Assists with deployment, registration, troubleshooting, and user support for strong authentication solutions.
• Participates in the design and rollout of modern passwordless authentication strategies.
• Develops, tests, and troubleshoots APIs using Postman, REST APIs, Graph APIs, & JSON-based integrations.
• Supports integration of identity platforms with internal and external applications. Creates and maintains automation scripts and small development components.
• Assists application teams with authentication and SSO integration requirements. Monitors authentication systems for operational health and security events.
• Supports security investigations involving authentication, access management, and credential usage. Creates dashboards, reports, and operational metrics.
• Performs log analysis using Splunk, Microsoft security tools, & other monitoring platforms. Builds operational and security reporting using Power BI & Splunk.
• Produces KPIs and trend analyses related to authentication services and user administration. Identifies opportunities to automate repetitive support and administration tasks.
• Leverages Microsoft Copilot and AI-based tools to improve operational efficiency and user experience.
• Develops AI-assisted workflows, automation solutions, documentation, and support processes.
• Contributes to continuous service improvement initiatives.
• Performs other duties as assigned by Supervisor.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
• 10+ years of hands-on experience with MFA enablement, support and troubleshooting
  .
• 5+ years of experience in Entra , Open Text NetIQ Advanced Authentication.
• 10+ years of successfully delivering complex MFA projects in large-scale enterprise environments.
• 10+ years of experience driving products from concept and ideation through successful launch.
• 10+ years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).
• 10+ years of experience in understanding and working with non-functional requirements.
• 10+ years of experience of working in an enterprise environment.
• Trainings and self-developments in the field of MFA, IAM, Entra , Azure, AWS
• Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified:
  Azure Security Engineer Associate (preferred).
• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access).
• Expert skills in professional communication (written, verbal and presentation).
• Advanced proficiency in NetIQ Advanced Authentication.
• Expert knowledge of (functional) testing methodologies and tools, including test automation.
• Expert knowledge of root…