Microsoft Entra ID Architect

At Key Data Cyber, we’re shaping the future of identity security. Recognized by Gartner and Kuppinger Cole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M identities managed, and 1,000 successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

We are seeking a highly skilled Microsoft
Entra specializing in Microsoft Entra  (formerly Azure Active Directory) to join our Delivery Services team. In this role you will design, implement, and manage our cloud-based and hybrid identity infrastructures. You will serve as the subject matter expert for our identity ecosystem, ensuring seamless user access while maintaining a robust security posture. You will be responsible for defining access management strategies, enforcing governance policies, and securing our enterprise resources across hybrid environments.

Location: USA, Remote

Employment Type: Contract Up to 10 months

• Design, deploy, and maintain Microsoft Entra  hybrid identity architectures, including Entra Connect / Cloud Sync environments.
• Manage corporate directory integration between on-premises Active Directory (AD) and Entra .
• Oversee Enterprise Applications, App Registrations, and Service Principals, ensuring secure API permissions and consent frameworks.
• Troubleshoot complex authentication, synchronization, and replication issues across hybrid infrastructure.
• Design and enforce zero-trust security architectures using Entra Conditional Access Policies, risk-based policies, and Continuous Access Evaluation (CAE).
• Deploy and manage Multi-Factor Authentication (MFA), Passwordless authentication, and Windows Hello for Business.
• Configure and maintain Privileged Identity Management (PIM) to enforce just-in-time (JIT) and just-enough-access (JEA) for administrative roles.
• Implement Entra , including Access Reviews, Entitlement Management (Access Packages), and Lifecycle Workflows to automate user onboarding/offboarding.
• Automate routine identity management tasks using Power Shell, Microsoft Graph API, and Azure Automation runbooks.
• Monitor identity security logs using Entra , Log Analytics, and integrate logs with enterprise SIEM platforms (e.g., Microsoft Sentinel).
• Conduct regular access audits to ensure compliance with corporate policies, regulatory standards (e.g., SOC2, ISO 27001), and identity best practices.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent professional experience).
• 5 years of dedicated experience in Identity and Access Management (IAM), with at least 3 years focusing heavily on Microsoft Entra  / Azure AD.
• Deep understanding of modern authentication protocols (SAML 2.0, OIDC, OAuth 2.0, WS-Fed, FIDO2).
• Hands-on experience configuring Entra  tools (PIM, Access Reviews).
• Strong proficiency in scripting and automation using Power Shell and interfacing with the Microsoft Graph API.
• Solid understanding of network security concepts relating to identity (e.g., Managed Identities, Application Proxy, Private Access).

• Microsoft Certified:
  Identity and Access Administrator Associate (SC-300), Microsoft Certified:
  Cybersecurity Architect Expert (SC-100) or Azure Solutions Architect Expert (AZ-305)
• CISSP, CISA, or CCSP designations are highly valued.
• Familiarity with integrating Entra  governance platforms (such as SailPoint Identity Security Cloud or Identity IQ) for advanced identity lifecycle workflows is a strong plus.
• Strong…