Solutions Architect - AD/Entra Architect

Job Description and ResponsibilitiesTI is seeking a senior AD and Entra architect to lead the design and evolution of our enterprise identity infrastructure supporting both IT and OT environments. This role will architect and optimize Active Directory and Microsoft Entra ID (Azure AD) solutions that serve as the backbone for identity management across our global organization, supporting 50,000+ users and complex hybrid cloud deployments. You will design scalable identity solutions while ensuring seamless integration between on-premises legacy systems, modern cloud applications, and increasingly critical operational technology environments.Key responsibilities will be as follows:Design and implement enterprise-scale Active Directory forest architectures, including multi-domain topologies, trust relationships, and site replication strategiesArchitect Microsoft Entra ID tenant configurations supporting hybrid identity scenarios, conditional access policies, and zero-trust security modelsDevelop and enforce identity governance frameworks including role-based access control (RBAC), privileged identity management (PIM), and lifecycle management processesDesign secure authentication and authorization patterns for enterprise applications, including SAML, OAuth 2.0, OpenID Connect, and Kerberos implementationsPartner with cybersecurity, infrastructure, and application teams to establish identity security standards and access management best practicesEvaluate and integrate emerging identity technologies to enhance user experience while maintaining security postureLead cross-functional identity modernization initiatives, including legacy application migration and cloud-first identity strategiesProvide technical leadership and mentoring to identity engineering teams across global locationsEstablish monitoring and governance frameworks to ensure identity infrastructure performance, compliance, and security metric.Enterprise identity management:Identity lifecycle management and automated provisioning/deprovisioningRole-based access control (RBAC), Attribute-based access control (ABAC) & Policy based-access control (PBAC) modelsSingle Sign-On (SSO) architecture for SaaS, on-premises, and hybrid applicationsMulti-factor authentication (MFA) strategy and implementation across diverse application portfoliosDirectory synchronization patterns and identity data governanceOperational Technology (OT) identity management experience: Access management for industrial control systems (SCADA, DCS, PLCs)Understanding of OT network segmentation and air-gapped environment challengesExperience with OT-specific authentication protocols and legacy system integrationHardening & segregation of legacy OT systems, services & data avoiding downtime or disruptionsTechnical architecture skills:PowerShell, Microsoft Graph API, and Azure CLI for identity automationDirectory services protocols (LDAP, LDAPS, Kerberos, NTLM)Network architecture understanding for identity services (DNS, firewalls, load balancers)Windows Server infrastructure and enterprise-scale system administrationCloud architecture patterns in Azure, with understanding of other major cloud platformsLeadership and communication:Proven ability to influence technical decision-making across global, cross-functional teamsExceptional communication skills to translate complex identity concepts for business stakeholdersExperience mentoring and developing technical teams in identity management practicesStrong project management capabilities for large-scale identity transformation initiativesPreferred/Nice-to-Have Skills:Experience with other identity platforms (Ping Identity, SailPoint, AWS IAM)Knowledge of compliance frameworks relevant to identity management (SOX, GDPR, HIPAA, NIST)Certifications in Microsoft identity technologies (SC-300, MS-102) or equivalent vendor certificationsExperience with identity analytics, risk-based authentication, and behavioural analysis toolsUnderstanding of DevSecOps practices and infrastructure-as-code for identity deploymentsWhy TI?Engineer your future. We empower our employees to truly own their career and development. Come collaborate with some of the smartest people in the world to shape the future of electronics.We're different by design. Diverse backgrounds and perspectives are what push innovation forward and what make TI stronger. We value each and every voice, and look forward to hearing yours. Meet the people of TIBenefits that benefit you. We offer competitive pay and benefits designed to help you and your family live your best life. Your well-being is important to us. Please find our country-specific benefits hereAbout Texas Instruments Texas Instruments Incorporated (Nasdaq: TXN) is a global semiconductor company that designs, manufactures and sells analog and embedded processing chips for markets such as industrial, automotive, data center, personal electronics and communications equipment. At our core, we have a passion to create a better world by making electronics more affordable through semiconductors. This passion is alive today as each generation of innovation builds upon the last to make our technology more reliable, more affordable and lower power, making it possible for semiconductors to go into electronics everywhere. Learn more at TI.com. Texas Instruments is an equal opportunity employer and supports a diverse, inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, disability, genetic information, national origin, gender, gender identity and expression, age, sexual orientation, marital status, veteran status, or any other characteristic protected by federal, state, or local laws. If you are interested in this position, please apply to this requisition. TI does not make recruiting or hiring decisions based on citizenship, immigration status or national origin. However, if TI determines that information access or export control restrictions based upon applicable laws and regulations would prohibit you from working in this position without first obtaining an export license, TI expressly reserves the right not to seek such a license for you and either offer you a different position that does not require an export license or decline to move forward with your employment.Minimum Requirements:Bachelor's degree8+ years of experience in identity and access management, systems architecture, or related enterprise infrastructure roles5+ years of hands-on experience architecting and managing Active Directory in enterprise environments (10,000+ users)3+ years of experience with Microsoft Entra ID (Azure AD) architecture and hybrid identity implementationsPreferred Qualifications:Active Directory Domain Services (AD DS) architecture including:Multi-forest and multi-domain design patternsSite topology optimization and replication managementGroup Policy architecture and delegation modelsTrust relationships and cross-forest authenticationMicrosoft Entra ID (Azure AD) advanced configurations including:Hybrid identity with Azure AD Connect/Cloud SyncConditional Access policy design and implementationPrivileged Identity Management (PIM) and Identity GovernanceApplication integration patterns and enterprise application galleryIdentity federation protocols and standards (SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation)Certificate-based authentication and PKI integration with identity servicesFull timePosting Date: 2026-08-13