Principal Microsoft Entra Architect

Position: Principal Microsoft Entra ID Architect
What success looks like in this role:
Highly skilled Security Architect with deep expertise in Microsoft Entra  lead the design, implementation, and governance of company Entra . The primary focus of this position is advancing the corporate IT strategy to reduce reliance on Active Directory by adopting secure, cloud-based identity capabilities in Microsoft Entra  Active Directory remains critical to current operations, the role also provides senior security architecture and strategic guidance to ensure corporate Active Directory environments remain secure, resilient, operationally sound, and appropriately integrated throughout the transition.

This role is pivotal in ensuring identity configurations, security, and operational practices align with Zero Trust principles, corporate security policies, and industry best practices. This is a hands-on role requiring technical depth, architectural leadership, and delivery focus. Entra n architect and SME for corporate tenant directory baseline configurations and settings.

Govern roles, permissions and consent management, enforcing least privilege through robust delegated and application permission models.

Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests.

Implement Tenant DR recoverability using best cost-effective means

Implement application access reviews to validate permissions and ensure least privileged access.

Design and drive optimal security and cost Securely manage application secrets and certificates, integrating with corporate PKI infrastructure and Azure Key Vaults.

Design and enforce Conditional Access policies based on user, location, device, and risk signals in coordination with security team.

Conduct threat modeling and risk assessments for authentication and authorization flows.

Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor, and Entra  logs.

Define and maintain the enterprise identity architecture leveraging Microsoft Entra  the adoption of modern authentication (OAuth, OIDC, SAML, FIDO2, passwordless).Implement identity lifecycle automation using tools such as Entra  (IGA), Privileged Identity Management (PIM), and Access Reviews.

Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations.

Integrate third-party SaaS and internal applications with Entra  SSO and provisioning (SCIM).Support the rollout of MFA, passwordless authentication, and secure sign-in enhancements.

Active Directory Security and Architecture:

Provide senior security architecture and strategic direction for Active Directory environments across the corporation, with particular emphasis on the company’s production environment.

Define and govern enterprise Active Directory architecture, security, privileged access, resilience, and operational standards.

Partner with Active Directory engineering and operations teams to ensure critical directory services remain secure, resilient, operationally sound, and recoverable.

Architect and oversee secure integration between Active Directory and Microsoft Entra s hybrid identity services.

Advance the corporate strategy to reduce reliance on Active Directory by modernizing identity services and transitioning appropriate capabilities to Microsoft Entra s architectural risks and legacy dependencies, guide remediation and dependency-reduction initiatives, and provide senior escalation for complex or high-risk security and design decisions.

Strategic Problem Solving:
Lead structured problem-solving for complex, high-impact identity and security challenges, with primary emphasis on Microsoft Entra , cloud identity governance, authentication, authorization, and application access.

Develop scalable…