Identity Architect

Required Skills & Experience

• 8+ years of Identity and Access Management experience.
• Proven architecture/design ownership for cross-tenant identity migrations.
• Deep Microsoft Entra ID experience, including Conditional Access, SSO, MFA, and Entra Connect.
• Deep Active Directory expertise.
• Strong SAML, OIDC, OAuth, SCIM, and claims-mapping experience.
• Hands-on PowerShell.
• Python and Microsoft Graph experience.
• Strong DNS and PKI knowledge.
• Ability to own discovery, architecture, planning, risk, migration, and cutover execution rather than functioning solely as a high-level architect.
• Ability to lead engineers while remaining hands-on.

Nice to Have Skills & Experience

• Previous M&A integration experience.
• SC-300 certification.
• Quest or comparable identity/migration tooling.
• AWS, GCP, or OCI identity experience.
• Experience supporting construction, energy, utilities, or another field-heavy organization.

Job Description

Senior hands-on Identity Architect responsible for leading identity integration during acquisitions. This person will own the identity domain from discovery and target-state architecture through cross-tenant coexistence, scripting, migration, and final cutover while leading a small engineering team.

• Own the identity workstream end to end across M&A integrations, from discovery and architecture through migration and final cutover.
• Assess acquired-company environments including Active Directory forests/domains, Entra ID tenants, federation, privileged accounts, SSO applications, and non-human identities.
• Design target-state identity architecture aligned with the parent organization’s Entra ID/M365 standards.
• Develop cross-tenant coexistence and migration strategies, including UPN and domain moves.
• Assess dependencies involving SSO applications, devices, service accounts, and service principals.
• Re-point and migrate applications using SAML, OIDC, OAuth and SCIM.
• Build migration sequencing, rollback procedures, and go/no-go criteria.
• Partner with security and compliance teams to implement appropriate access controls, including SOX requirements.
• Perform hands-on PowerShell, Python, and Microsoft Graph automation.
• Lead cutover execution and ultimately retire/decommission source identity environments.
• Direct 2-3 engineers and coordinate with program architects, security, compliance, application owners, and acquired-company IT teams