Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

Senior Principal/Architect (Identity & Security)

$225k - $304k

West Monroe

Are you ready to make an impact?

Senior Principal/Architect (Identity & Security) 

Overview

West Monroe is seeking a Senior Principal/Architect (Identity & Security) to lead cross-functional teams in the design, remediation, and modernization of complex identity and cloud infrastructure solutions. This role focuses on securing and transforming critical IT environments for a diverse portfolio of clients, helping them navigate complex Active Directory modernizations, cloud identity migrations, and security hardening initiatives. This opportunity provides technical leadership in transforming complex IT environments across key industry verticals, including Healthcare, Financial Services, Private Equity, and High Tech. While the scope spans hybrid and cloud identity, the work is particularly grounded in Active Directory as a core Tier 0 platform, with strong Microsoft Entra ID expertise to design and operate modern hybrid identity patterns. 

Responsibilities

  • Partner with consultants and client leadership to  architect, build, and deploy secure and modern Active Directory and Microsoft Entra ID solutions. 

  • Assess current-state identity environments and processes, interview stakeholders, define critical requirements, and present practical solution strategies and roadmaps to client executives. 

  • Lead the technical design of future-state Active Directory (AD DS) and Entra ID architectures, including privileged access management (PAM) design, tiered administrative access models (e.g., Microsoft’s Enterprise Access Model (EAM)), and identity consolidation strategies. 

  • Establish and enforce identity architecture standards, best practices, and governance to deliver secure, compliant, and consistent solutions aligned with industry benchmarks (e.g., CIS and** Microsoft baselines)**. 

  • Lead security assessment and remediation planning, including  consolidating findings from tools (e.g., Purple Knight, Maester, CIS Benchmark-based configuration assessments (e.g., CIS-CAT)) to create and manage prioritized, risk-based remediation backlogs. 

  • Provide  expert technical oversight for security remediation initiatives, such as hardening domain controllers, remediating privileged access, resolving Entra Connect sync issues, and restricting legacy protocols. 

  • Develop detailed implementation plans, migration strategies, and  remediation backlogs (e.g., in Smartsheet or similar project management tools) for AD restructuring, AD consolidation, identity synchronization, and legacy decommissioning. 

  • Establish and manage engagement-level  governance, quality, and risk , including defining quantitative success criteria, RACI, and clear communications to both technical and executive stakeholders. 

  • Support key decision-making on project direction, including technology selections, team workstreams, and delivery methodologies. 

  • Mentor junior consultants on technical best practices, solution design, and client engagement. 

  • Assist business development efforts through proposals, pre-sales technical discovery, and client presentations. 

Qualifications

  • Bachelor’s degree in a relevant field preferred, or equivalent experience required. 

  • Prior experience in consulting preferred. 

  • 8–12+ years of experience in IT architecture, engineering, and/or security with a deep focus on identity solutions. 

  • Expert-level knowledge of  Active Directory Domain Services (AD DS)design, security, and administration, including: domain/forest architecture,  sites/replication, DNS, Group Policy (GPO) management, DC virtualization safeguards, and forest recovery principles. 

  • Strong experience with  Microsoft Entra ID (formerly Azure AD), including Entra Connect, Conditional Access, modern authentication methods, and Privileged Identity Management (PIM). 

  • Proven experience leading identity migrations (including on-premises to cloud, cross-forest restructurings, and Tenant-to-Tenant (cross-tenant) consolidations), AD remediations, and/or consolidation projects. 

  • Experience designing and implementing hybrid authentication patterns between AD DS and Microsoft Entra ID, including pass-through authentication (PTA), Seamless SSO, Cloud Kerberos Trust, and phishing-resistant authentication methods. 

  • Proficiency in designing and implementing enterprise  Privileged Access Management (PAM)solutions (including typical platforms like CyberArk, Delinea, or similar) and  tiered administrative access models (e.g., Tier 0/1/2, Microsoft’s Enterprise Access Model (EAM)). 

  • Hands-on experience with Active Directory and Microsoft Entra ID security assessment and testing tools (e.g., Purple Knight, PingCastle, Maester, Microsoft Defender for Identity or similar AD threat detection platforms) and hardening methodologies (e.g., CIS Benchmarks and Microsoft security baselines). 

  • Proficiency with AD security hardening techniques such as KRBTGT password rotations, restricting NTLM, Group Policy object (GPO) cleanup, Local Administrator Password Solution (LAPS), implementing resource-based Kerberos constrained delegation (RBKCD), and configuring LDAP signing. 

  • Familiarity with migration and directory protection tools (e.g., Quest On-Demand Migration) and identity-driven application dependencies. 

  • Strong communication (written and verbal), presentation, client management, and team leadership skills. 

  • Willingness to travel for out-of-town client engagements. 

  • Bonus skills:

  • Familiarity with compliance standards (e.g., NIST, HIPAA, ISO). 

  • Advanced scripting for automation and analysis (e.g.,  PowerShell ). 

  • Knowledge of  Infrastructure as Code (Terraform)and  DevSecOps practices. 

  • Familiarity with application dependency and network flow mapping tools (e.g., Device42, Faddom) used to discover AD-integrated application dependencies and support migration planning or microsegmentation boundaries. 

  • Familiarity with Active Directory resilience and recovery tooling (e.g., Semperis, ADEngine) is a plus. 

  • Experience migrating from on-premises Active Directory Certificate Services (AD CS) to cloud-native PKI solutions is a plus. 

  • Familiarity with enterprise  Identity Governance and Administration (IGA)platforms (e.g., SailPoint, Saviynt) to manage and improve periodic access certifications (e.g., moving from spreadsheets to a tool) and run detective Segregation of Duties (SoD) reports. 

  • Experience  automating identity lifecycles by replacing nightly batch files from a Human Resources Information System (HRIS) with Application Programming Interface (API)-driven syncs or establishing governance for non-employee/contractor identities. 

  • Understanding of System for Cross-domain Identity Management** (SCIM)** or API-based provisioning to automate Joiner-Mover-Leaver (JML) workflows for  Software as a Service (SaaS)apps, expanding beyond just core directories and email. 

  • Experience with Tier-0 threat monitoring and detection strategies, including security event logging and SIEM integration with Active Directory and other Tier 0 assets. 

  • Professional certifications (e.g., Microsoft Identity/SC series, CISSP, CyberArk/Delinea). 

  • Occasional exposure to CIAM platforms (e.g., Microsoft Entra External ID, Okta, Auth0) and associated migration/implementation patterns is a plus but not a core requirement. 

What to Expect

  • A collaborative, flexible, and outcomes-driven consulting environment. 

  • A culture that values inclusion, diverse perspectives, and teamwork. 

  • A business-focused and industry-specific approach to deploying technology that helps clients tackle their most significant challenges and deliver tangible results, free from rigid hierarchies. 

  • While the role spans a broad range of identity technologies and tools,  no candidate is expected to be an expert in every item listed . We are seeking deep strength in Tier-0 Active Directory security and modernization, paired with strong Microsoft Entra ID knowledge and the curiosity to rapidly master adjacent areas. 

Ready to get started? Join the team and make an impact. 

Based on pay transparency guidelines, the salary range for this role can vary based on your proximity to one of our West Monroe offices (see table below). Information on our competitive total rewards package, including our bonus structure and benefits is  here . Individual salaries are determined by evaluating a variety of factors including geography, experience, skills, education, and internal equity.

Employees (and their families) are covered by medical, dental, vision, and basic life insurance. Employees are able to enroll in our company’s 401k plan, purchase shares from our employee stock ownership program and be eligible to receive annual bonuses. Employees will also receive unlimited flexible time off and ten paid holidays throughout the calendar year. Eligibility for ten weeks of paid parental leave will also be available upon hire date. 

Seattle or Washington, D.C.

$236,300—$277,700 USD

Los Angeles

$247,500—$291,000 USD

New York City or San Francisco

$258,800—$304,200 USD

A location not listed above

$225,000—$264,500 USD

Other consultancies talk at you.

At West Monroe, we work with you.

We’re a global business and technology consulting firm passionate about creating measurable value for our clients, delivering real-world solutions.

The combination of business and technology is not new, but how we bring them together is unique. We’re fluent in both. We know that technology alone is not the answer, but how we apply it is. We rely on data to constantly adapt and solve new challenges. Actions that work today with outcomes that generate value for years to come.

At West Monroe, we zero in on the heart of the opportunity, getting to results faster and preparing people for what’s next.

You’ll feel the difference in how we work. We show up personally. We’re right there in the room with you, co-creating through the challenges. With West Monroe, collaboration isn’t a lofty promise, but a daily action. We work together with you to turn vision into clear action with lasting impact.

West Monroe **   ****is an Equal Employment Opportunity Employer **  
We believe in treating each employee and applicant for employment fairly and with dignity. We base our employment decisions on merit, experience, and potential, without regard to race, color, national origin, sex, sexual orientation, gender identity, marital status, age, religion, disability, veteran status, or any other characteristic prohibited by federal, state or local law. To learn more about diversity, equity and inclusion at West Monroe, visit  . If you require a reasonable accommodation to participate in our recruiting process, please inquire by sending an email to View email address on swooped.co .

Please review our current policy regarding use of generative artificial intelligence during the application process .

If you are based in California, we encourage you to read West Monroe’s Notice at Collection for California residents, provided pursuant to the California Consumer Privacy Act (CCPA) and linked  here .  

Vacancy posted more than 2 months ago
Similar jobs that could be interesting for youBased on the Senior Principal/Architect (Identity & Security) in Seattle, WA vacancy
  • $184.2k - $291.4k

     ...complete, cloud-based solutions for search, security, and observability help organizations...  ...Role Elastic is expanding the Ecosystem Architects team focused on the most consequential...  ...distributed company, diversity drives our identity. Elastic strives to have parity of... 
    Principal
    Local area
    Flexible hours

    Elastic

    Seattle, WA
    6 days ago
  •  ...Alaska Airlines is seeking a Senior Principal Mobile Solutions Architect to lead governance and best practices for software engineering across Alaska and...  ...standards, drive architecture roadmaps, and ensure security, cost, and scalability in delivery. You will collaborate... 
    Principal
    Senior

    Jobleads-US

    Seatac, WA
    1 day ago
  •  ...DirectoryServices System Administrator in the Washington, D.C. area to sustain and enhance enterprise identity, authentication, and directory services. You will work within a security-conscious IT environment to maintain hybrid authentication systems and implement automation.... 
    Senior

    General Dynamics Information Technology

    Seattle, WA
    5 days ago
  •  ...JPMorganChase seeks a Senior Principal Software Engineer to lead the design and implementation of a software-defined networking platform...  ...scale, and ongoing innovation. You will guide strategy, architect core networking components, and drive production-grade software... 
    Principal
    Senior

    Jobleads-US

    Seattle, WA
    4 days ago
  • $152.07k - $202.76k

     ...network and connected ecosystem. We enable secure, high‑performance connectivity across...  ...looking for a strategic and technical Principal Architect to design the new architecture...  ...age, gender, sexual orientation, gender identity, gender expression, marital status, family... 
    Principal
    Full time
    Temporary work
    Remote work

    Lumen

    Seattle, WA
    1 day ago
  • $150k - $175k

     ...impact in enabling commercial and national security missions from the depths of our oceans,...  ...in hiring on the basis of sex, gender identity, sexual orientation, race, color,...  ...protected by federal, state, or local law. Senior/Principal Technical Project Manager  Zeno is... 
    Principal
    Senior
    Permanent employment
    Full time
    Contract work
    For contractors
    Work experience placement
    Work at office
    Local area
    Remote work
    Relocation package
    Monday to Friday
    Flexible hours

    Zeno Power

    Seattle, WA
    more than 2 months ago
  • Nscale is seeking a Senior Workday Analyst to own Workday across the company as we scale globally. You will set configuration direction, security, and governance for the platform while partnering with the People Systems Engineer to connect Workday to other systems. You... 
    Senior

    Nscale

    Seattle, WA
    5 days ago
  • $191k - $297k

     ...are seeking an accomplished Principal Security Engineer to serve within...  ...Organization (CPO), focused on Identity & Access Management (IAM)....  ...& access management in a senior or principal technical leadership...  ...patterns.Proven experience architecting and implementing IAM... 
    Principal
    Full time
    Work at office

    Nordstrom

    Seattle, WA
    6 days ago
  • $254k - $349k

    Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral...  ...this mission. If you are too, let's talk.We are seeking a Principal Product Manager, Okta Identity Threat Detection and Response... 
    Principal
    Local area
    Worldwide
    Flexible hours

    Okta

    Bellevue, WA
    5 days ago
  • $173k - $216.3k

     ...work of their lives.We are seeking a highly experienced Principal Product Manager, Software to join our team, focusing on the critical areas of Global Identity, Security, and Regulatory Compliance. In this senior individual-contributor role, you will define and deliver... 
    Principal
    Full time
    Temporary work
    Work at office
    Immediate start
    Remote work
    Work from home
    Work visa
    3 days per week

    Sonos

    Seattle, WA
    7 days ago
  • Nordstrom seeks a Senior Manager, Identity Security Operations in Seattle with a hybrid schedule requiring in-office work at least four days per week. You will own the identity security operations end-to-end, including health, reliability, and security posture for platforms... 
    Senior
    Work at office

    Nordstrom

    Seattle, WA
    1 day ago
  • $95.86k - $208.27k

     ...of inspiration and expand your capabilities, then consider a career in Advisory. KPMG is currently seeking a Senior Associate, SailPoint Identity Security Cloud Engineer to join our Advisory Technology Organization. Responsibilities: Support SailPoint Identity... 
    Senior
    Full time
    H1b
    Local area

    KPMG

    Seattle, WA
    3 days ago
  •  ...DoorDash, Affirm, and Zillow.Job SummaryThe Identity & Access Management team owns our...  ...piece of customer data, so reliability and security posture come first. Much of our roadmap...  ...procurement and renewal.We are seeking a senior technical leader for this platform. You... 
    Principal
    Senior
    Full time
    Live in
    Remote work
    Visa sponsorship
    Work visa
    Flexible hours

    Palo Alto Networks

    Seattle, WA
    7 days ago
  •  ...SummaryPrincipal ArchitectAs a Principal Architect you will serve as a trusted...  ...driving them to successful security outcomes. This role focuses...  ...Security, Security Operations, and Identity Security. The ideal...  ...engagements.Engage directly with senior technical and business... 
    Principal
    Full time
    Remote work
    Visa sponsorship
    Work visa

    Palo Alto Networks

    Seattle, WA
    7 days ago
  • $154.38k - $193.13k

    Job DescriptionAI Architect, AI & AutomationAbout the Role The applicant...  ...management, and data privacy/security considerations.Experience...  ...clients, including clients at senior levels. Anticipates and...  ...to race; color; sex; gender identity; sexual orientation; religious... 
    Principal
    Full time
    Temporary work
    Work experience placement

    Infosys Technologies

    Bellevue, WA
    6 days ago
  • $191k - $297k

     ...count on us to keep their experience seamless and secure. Behind that experience is a team obsessed with getting identity right — making sure the right people, and the...  ...'s security program, and we're looking for a senior leader to own the operational engine that keeps... 
    Senior
    Full time
    Contract work
    Work at office

    Nordstrom

    Seattle, WA
    4 days ago
  • $166k - $220k

     ...fusion, and networking technology to the military in months, not years.ABOUT THE TEAMAnduril's Security Engineering team is looking for a Security Engineer to focus on Identity and Access Management and build and maintain world class defensive controls to protect the... 
    Senior
    Full time
    Work experience placement
    Immediate start

    Anduril Industries

    Seattle, WA
    5 days ago
  •  ...matters. Job Summary Principal Architect As a Principal Architect...  ...driving them to successful security outcomes. This role focuses...  ...Security, Security Operations, and Identity Security. The ideal...  ...engagements. Engage directly with senior technical and business... 
    Principal
    Remote work
    Visa sponsorship
    Work visa

    Palo Alto Networks

    Seattle, WA
    2 days ago
  • $215.2k - $244.7k

     ...make an impact?West Monroe is seeking a Senior Architect to join our thriving Technology and...  ...aligned to client objectives, scalability, security, and compliance requirementsGuide and...  ...origin, sex, sexual orientation, gender identity, marital status, age, religion, disability... 
    Senior
    Local area
    Immediate start
    Flexible hours
    2 days per week
    1 day per week

    West Monroe Partners

    Seattle, WA
    7 days ago
  • $222.5k - $261.9k

     ...make an impact?West Monroe is seeking a Senior Architect to lead the technical vision,...  ...standards, and ensure our products are secure, scalable, and built for long-term success...  ...origin, sex, sexual orientation, gender identity, marital status, age, religion, disability... 
    Senior
    Local area
    Immediate start
    Flexible hours

    West Monroe Partners

    Seattle, WA
    5 days ago
  • $222.5k - $261.9k

    Are you ready to make an impact?As a Senior Architect within West Monroe’s Technology Advisory...  ...Solution Design Develop robust, scalable, and secure architectures that address client needs...  ..., sex, sexual orientation, gender identity, marital status, age, religion,... 
    Senior
    Local area
    Immediate start
    Flexible hours

    West Monroe Partners

    Seattle, WA
    3 days ago
  • $119.3k - $179k

     ...leading integrated design practice. Our architects, engineers, interior designers, consultants...  ..., NGB, GSA, and more.We are seeking a Senior Project Architect to join our integrated...  ...disability, sexual orientation, gender identity or gender expression. We prohibit discrimination... 
    Senior
    Full time
    Contract work
    Temporary work
    Part time
    Casual work
    Work at office
    Local area
    Remote work
    Flexible hours

    Stantec

    Seattle, WA
    6 days ago
  • $77k - $202k

     ...work to identify vulnerabilities, develop secure systems, and provide proactive solutions...  ...implementation of cloud security strategies. As a Senior Associate, you will analyze complex...  ..., sexual orientation, and gender identity); age; disability; genetic information (including... 
    Senior
    Full time
    H1b

    PwC

    Seattle, WA
    5 days ago
  • $124k - $280k

     ...the Data Management team, you architect and manage master data...  ...enhance business processes. As a Senior Manager, you lead large projects...  ...orientation, and gender identity); age; disability; genetic information...  ...thoughtfully to establish a secure and trusted workplace for all... 
    Senior
    Full time
    H1b

    PwC

    Seattle, WA
    3 days ago
  •  ...that happens. About the Role: As Manager / Senior Manager, Solutions Architecture, you'll lead the Solutions Architects who own our most complex customer deployments...  ..., disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic... 
    Senior
    Permanent employment
    Full time
    Contract work
    Temporary work
    Casual work
    Work at office
    Flexible hours

    Socket

    Bellevue, WA
    20 hours ago
  • $111.5k - $163.8k

     ...to sex, race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity or expression, gender reassignment, citizenship, pregnancy or maternity, veteran status, or any other status protected by applicable... 
    Senior
    Full time
    Contract work
    Temporary work
    For contractors
    Work at office
    Local area

    Perkins & Will

    Seattle, WA
    4 days ago
  • $99k - $232k

     ...OpportunityAs part of the Data Management team you architect end-to-end MDM solutions, including...  ..., sexual orientation, and gender identity); age; disability; genetic information (...  ...these factors thoughtfully to establish a secure and trusted workplace for all.... 
    Senior
    Full time
    H1b

    PwC

    Seattle, WA
    3 days ago
  • $63.91 - $108.82 per hour

    Senior Security Engineer IS - Identity & Access ManagementWe are seeking a highly motivated Senior Security Engineer with a strong passion for Identity and Access Management (IAM) to join our Enterprise Security & Infrastructure (ESI) organization.The ideal candidate brings... 
    Senior
    Minimum wage
    Local area
    Remote work
    Shift work
    Weekend work

    Providence Health & Services

    Renton, WA
    7 days ago
  • $145k - $185k

     ...impact in enabling commercial and national security missions from the depths of our oceans,...  ...in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious...  ...Zeno is seeking a highly motivated Senior Systems Engineer to support the engineering... 
    Principal
    Senior
    Permanent employment
    Full time
    Contract work
    Work experience placement
    For subcontractor
    Work at office
    Local area
    Remote work
    Relocation package
    Monday to Friday
    Flexible hours

    Zeno Power

    Seattle, WA
    12 days ago
  • We AreAccenture Security helps organizations prepare, protect, detect...  ...blend risk strategy, digital identity, cyber defense, application...  ...that got you there. You've been senior long enough to set direction,...  ...you're the person a client's principal engineers argue with, and the... 
    Senior
    Full time
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    Seattle, WA
    4 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Senior Principal/Architect (Identity & Security). Be the first to apply!