Microsoft Entra ID Architect

Job: Microsoft Entra ID Architect

Location: Boston, MA / Jersey City, New Jersey(Onsite)

Job Type: || Full time||

Key Responsibilities

• Serve as the lead architect for Microsoft Entra ID , defining long‑term identity and access strategies aligned to Zero Trust and enterprise security objectives.
• Design and govern Conditional Access frameworks that balance security, usability, and operational scalability across workforce, partner, and privileged identities.
• Define security guardrails and architectural standards
• Architect privileged access models using least‑privilege and just‑in‑time principles, including role design, separation of duties, and blast‑radius reduction.
• Act as a advisor to Security, and Infrastructure translating identity risk into actionable architectural decisions.
• Partner with IAM, cloud security, endpoint, and application teams to ensure consistent policy enforcement across the enterprise.
• Evaluate emerging identity threats and platform capabilities, evolving Conditional Access and identity controls accordingly.
• Review and approve complex identity designs, exceptions, and risk acceptances.

Required Experience & Expertise

• 7–10 years of progressive experience in Identity & Access Management , with significant focus on cloud identity platforms.
• Deep, hands‑on expertise with Microsoft Entra ID , including tenant architecture and advanced security controls.
• Proven experience designing Conditional Access policies at scale , including risk‑based access, session controls, and authentication strength enforcement.
• Strong understanding of identity attack vectors , token theft, privilege escalation, and identity‑centric threat models.
• Experience operating in regulated, audit ‑ driven environments with high expectations for control design and documentation.
• Ability to communicate complex security concepts clearly to senior IT, security, and risk executives .
• Extensive experience scripting against Microsoft Graph API for automation, reporting, and advanced identity management tasks.

Preferred Qualifications

• Experience in consulting or advisory roles supporting large enterprises.
• Background in Zero Trust architecture or identity security strategy.
• Industry certifications in security, identity, or cloud architecture (preferred, not required).
• Experience working in large enterprise environment.