IAM Architect Job at Openkyber, Washington DC

UnU1Z3NyNjNna0JwZGxLcEROQXF3Z1N6YlE9PQ==
  • Openkyber
  • Washington DC

Job Description

Role Overview We are seeking a visionary and highly technical Senior IAM Entra ID Architect to lead the strategy, design, and modernization of our enterprise Identity and Access Management (IAM) ecosystem. In this role, you will serve as the principal authority on Microsoft Entra ID (formerly Azure AD) and hybrid identity frameworks. You will architecture a robust, resilient, and compliant identity landscape, ensuring seamless user experiences while rigorously enforcing a modern Zero Trust security posture. Core Responsibilities 1. Identity Architecture & Strategy Define the enterprise identity roadmap, transitioning legacy architectures toward a mature Zero Trust Security Architecture. Design and oversee the governance of tenant-wide configurations within Microsoft Entra ID. Serve as the subject matter expert (SME) for merging, consolidating, or migrating identity environments during corporate restructuring or M&A activities. 2. Hybrid Identity Integration Architect and maintain high-availability sync topologies linking on-premises Active Directory with cloud environments via Entra Connect / Cloud Sync. Resolve complex synchronization challenges, identity lifecycle loops, and directory cleanup initiatives. 3. Access Management & Modern Authentication Design, deploy, and continuously optimize advanced Conditional Access policies to guarantee contextual, risk-based security boundaries. Architect seamless, secure access using Single Sign-On (SSO) and Multi-Factor Authentication (MFA) platforms (including passwordless and FIDO2 integration). Integrate third-party SaaS, PaaS, and on-premises applications using modern protocols: SAML, OAuth 2.0, OIDC, and automated provisioning via SCIM. 4. Identity Governance & Administration (IGA) Architect and enforce Identity Governance strategies, including structured access reviews, entitlement management, and lifecycle workflows. Design and manage just-in-time (JIT) elevated access utilizing Privileged Identity Management (PIM) for directory and Azure resources. 5. Automation & Engineering Develop robust enterprise-grade scripts using PowerShell and the Microsoft Graph API to automate identity provisioning, audit reporting, and configuration management. Eliminate manual administrative overhead through Infrastructure as Code (IaC) or automated lifecycle pipelines. Qualifications & Skills Technical Requirements Deep Microsoft Expertise: Elite-level knowledge of Microsoft Entra ID architectural patterns, premium features (P1/P2), and security cross-integrations. Directory Services: Proven mastery of Active Directory Domain Services (AD DS), group policies, Kerberos, and hybrid integration patterns. Protocol Mastery: Authoritative understanding of web-identity standards (SAML 2.0, OpenID Connect, OAuth 2.0) and automated provisioning methods (SCIM). Developer Mindset: Highly proficient in utilizing Microsoft Graph API endpoints and writing production-ready PowerShell automation scripts. Security Frameworks: Practical execution experience mapping IAM controls to Zero Trust principles, NIST frameworks, or CIS benchmarks. Soft Skills & Leadership Excellent communication skills with the ability to translate highly technical identity concepts into business risks/benefits for executive stakeholders. Strong analytical and troubleshooting capability for complex, cross-domain authentication failures. Preferred Certifications (A Plus) Microsoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Cybersecurity Architect Expert (SC-100) CISSP (Certified Information Systems Security Professional)

For applications and inquiries, contact:hirings@openkyber.com

Job Tags

Similar Jobs

Drivers Union

Staff Attorney Job at Drivers Union

 ...fought long and hard to establish these rights; we are looking for staff who are committed to the fight and to advancing social and economic justice. Drivers Union is seeking a full-time Staff Attorney to represent gig workers in arbitration and legal proceedings. This... 

Confidential

EH&S Manager ~ CONFIDENTIAL RETAINED SEARCH Job at Confidential

MIG TIG Welder#3577346 Job Title: MIG TIG Welder Location: La Vista, NE Salary Compensation: $22.00-$29.00 per hour | $46,000-$60,000 annually (Salary commensurate with experience.) Work Location: On-Site Only (Not remote or hybrid) Job Type: Direct Hire...

Confidential

Change Manager Job at Confidential

 ...modernize how we operate, how we serve consumers, and how we enable our teams, so that change is not only delivered, but adopted and sustained. General Mills Change Management Center of Excellence (CoE) builds sustainable change capability across the organization... 

Speedbox LLC

Package Delivery Driver $24.50/Hour, $5250 Tuition, Weekly Bonuses Job at Speedbox LLC

 ...to come. Were looking for high-energy, reliable, and "smooth-driving" individuals to join our package delivery crew. If you love the...  ...or study. Flexibility: Must be willing to work at least one weekend day (Saturday or Sunday). Qualifications Baseline Requirements... 

Holy Family Academy

School Secretary -- Office Manager Job at Holy Family Academy

Join a school staff and community that is preserving & developing Catholic culture for the next generation.Holy Family Academy in Manassas, VA is hiring a full-time School Secretary & Office Manager to start August 17, 2026.Applicants should be committed Catholic education...