Cybersecurity Senior IAM Architect

Enterprise Identity Architecture (AD and Hybrid Identity)

• Lead the design and architecture of Active Directory and Microsoft Entra ID hybrid environments, including domain and forest strategy, AD and Entra migrations and consolidations, tenant integration, identity synchronization, and identity transition planning for mergers, acquisitions, and divestitures.

• Define enterprise standards for identity lifecycle, identity operations, authentication, directory services, MFA, Conditional Access, and Entra Privileged Identity Management (PIM).

• Architect high availability, disaster recovery, and scalability models for identity systems.

• Lead modernization efforts such as legacy domain remediation, AD hardening, cloud identity integration, and secure Microsoft 365 administrative architecture.

• Provide AD and Entra privileged-identity requirements and integration guidance to teams responsible for enterprise PAM platforms.

Identity Security Strategy & Zero Trust

• Develop and enforce identity security strategy aligned to Zero Trust architecture principles.

• Define and implement controls for tiered administration, privileged role activation through Entra PIM, PAWs, AD tiering, credential protection, MFA, Conditional Access, and attack surface reduction.

• Lead initiatives to reduce identity-based risk, including privileged account sprawl, excessive standing access, stale accounts, and unmanaged service or non-human identities.

• Drive adoption of passwordless and modern authentication technologies, including MFA, FIDO2, and Windows Hello for Business.

• Partner with PAM and security teams to align AD and Entra privileged identities with least-privilege, just-in-time access, monitoring, and credential lifecycle controls.

Cross-Platform Identity Integration

• Architect integration among Active Directory, Entra ID, Microsoft 365, IAM and identity governance platforms, identity security tools, and enterprise applications.

• Define identity and access architecture standards across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), including workforce access, privileged roles, workload identities, federation, and governance.

• Define standards for SSO, federation, and authentication protocols (SAML, OIDC, OAuth).

• Oversee identity integration across on-premises, cloud, SaaS, and third-party systems, including appropriate integration with PAM platforms when privileged identities are in scope.

• Ensure consistent identity governance across all platforms, including human, service, workload, and other non-human identities.

Active Directory Engineering Governance

• Define standards for AD object design, OU structure, GPO strategy, DNS integration, and identity synchronization.

• Lead AD health, performance, and security initiatives including audits, remediation, and optimization.

• Oversee enterprise-wide initiatives such as AD consolidation, domain migrations, and forest restructuring.

• Provide expert escalation support for complex AD-related issues.

Security, Risk & Compliance Oversight

• Ensure identity platforms meet applicable regulatory and security standards, including SOX, PCI, and NIST.

• Lead efforts to audit and monitor directory activity, privileged role use, authentication, and access control effectiveness.

• Partner with SIEM, endpoint, and security teams to integrate identity telemetry for detection and response, including capabilities such as CrowdStrike Identity Threat Protection and other identity security tools.

• Define access review, certification, and governance processes across identity systems.

Technical Leadership & Strategy

• Serve as the principal architect and SME for identity and access management across the organization.

• Define the long-term architectural roadmap for identity services, aligning with enterprise and cybersecurity strategy.

• Provide hands-on guidance and technical direction to IAM engineers and architects.

• Influence executive stakeholders and drive adoption of secure identity practices across business units.

Incident Response & Operational Excellence

• Provide expert-level support during identity-related incidents, including AD compromise, credential attacks, Entra role misuse, authentication failures, and identity service disruptions.

• Lead root cause analysis and remediation for identity security incidents, coordinating with PAM platform owners when privileged access tooling is involved.

• Establish monitoring, alerting, and response procedures for identity infrastructure and identity threat detections.

• Ensure resilience and recovery capabilities for identity services.

Reporting & Documentation

• Develop architectural documentation, standards, and design patterns for enterprise identity systems.

• Provide executive-level reporting on identity security posture, risks, and initiatives.

• Maintain detailed documentation for AD, Entra ID, Microsoft 365 identity architecture, Entra PIM, and related privileged-identity integrations to support operational continuity.

Continuous Improvement & Innovation

• Stay current with advancements in Active Directory security, Entra ID, Microsoft 365, cloud IAM, modern authentication, identity threat protection, and privileged-identity practices.

• Evaluate emerging technologies, including AI-enabled identity capabilities and governance approaches for non-human identities, to improve identity security and operational efficiency.

• Maintain awareness of emerging agentic AI security considerations, including agent identity, delegated authority, permissions, credential use, and appropriate human oversight.

• Drive automation initiatives across identity lifecycle, provisioning, access governance, identity operations, and privileged role management.