Workforce Identity Architect, VP

* Define and maintain global workforce identity architecture using Microsoft Entra  hybrid and cloud‐mastered environments.
* Establish standard patterns for authentication, federation, Conditional Access, and MFA.
* Design tenant‐level identity integration patterns that scale across applications and regions.
* Architect and standardize Joiner / Mover / Leaver (JML) identity lifecycle patterns driven by authoritative HR sources.
* Ensure consistent provisioning, modification, and deprovisioning of workforce identities.
* Reduce orphaned, dormant, and over‐provisioned access through strong lifecycle
** design.
*** Define workforce identity governance standards, including access requests, access reviews, and separation of duties (SoD).
* Architect privileged access models for workforce identities, including PIM and Just‐in‐Time access.
* Ensure access models are auditable and aligned to regulatory and risk expectations.
* Leverage analytics and AI‐assisted capabilities to improve role and entitlement design.
* Reduce access certification noise by improving role quality, review scoping, and access rationalization.
* Translate analytic insights into architectural improvements rather than one‐off reporting.
* Define B2B and partner identity patterns using Entra  enable collaboration while maintaining centralized governance.
* Ensure third‐party access aligns with global standards and workforce identity controls.
* Partner with IAM Governance teams to define and consume workforce identity metrics, including access quality, review effectiveness, and lifecycle hygiene.
* Use metrics to continuously improve identity architecture and reduce access risk.
* A senior architecture and standards role
* Focused on workforce identity at enterprise and global scale
* A bridge between architecture, security, risk, and delivery team
* An IAM operation or helpdesk role
* A single‐tool administrator position
* A regional‐only identity role
* Consistent, scalable workforce identity standards adopted across regions
* Reduced access risk and certification fatigue
* Clear lifecycle ownership and audit‐ready access governance
* Smooth regional progression toward cloud‐mastered identity
* 8–10+ years of experience in identity, access management, or security architecture roles.
* Deep expertise in Microsoft Entra  in hybrid environments.
* Strong experience designing JML lifecycle, identity governance, and privileged access controls.
* Ability to design auditable, regulator‐defensible access models.
* Proven ability to influence across technical and non‐technical stakeholders.
* Experience using analytics or AI‐assisted tools for access optimization and certification improvement.
* Experience supporting global or federated IAM models with regional variation.
* Familiarity with regulated industries (e.g., financial services).
* Relevant identity or security certifications.
* Identity Architecture & Lifecycle
* Enterprise‐level experience designing workforce identity architecture at scale.
* Deep understanding of Joiner / Mover / Leaver (JML) lifecycle patterns and HR‐driven identity provisioning.
* Strong grounding in least privilege, access lifecycle management, and identity hygiene.
* Microsoft Entra  (Azure AD)
* Hands‐on architectural experience with Microsoft Entra  hybrid environments.
* Design and governance of:  + Authentication and federation  + Conditional Access and MFA  + Tenant‐level architecture and integration patterns
* Identity Governance & Access Controls
* Proven experience designing identity governance solutions, including:  + Access reviews / certifications  + Separation of Duties (SoD)  + Access request and approval workflows
* Ability to design auditable, regulator‐defensible access models.
* Privileged Access
* Experience with privileged access for workforce identities, including:  + Privileged Identity Management (PIM)  + Just‐in‐Time (JIT) access concepts
* Stakeholder & Architecture Skills
* Strong ability to collaborate across architecture, engineering, security, risk, and audit teams.
* Comfortable influencing outcomes without direct authority.
* Ability to translate complex identity concepts into clear architectural standards.

- **…