Cybersecurity Senior IAM Architect
Las Vegas, NV, United States3w ago
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
How well do you match this job?
Key details
- Location
- Las Vegas, NV, United States
- Work style
- Hybrid
- Level
- Lead / Staff+
- Job type
- Full-time
- Experience
- 7–10 yrs
- Function
- IT & Security operations
- Focus area
- Security
- Posted
- 3w ago
Skills
About the role
We are seeking an experienced and highly skilled Senior Identity & Access Management Architect to provide enterprise architecture leadership for Active Directory, Microsoft Entra ID, Microsoft 365, and hybrid identity services. This principal-level role defines, designs, and governs secure, resilient identity capabilities across on-premises and cloud environments.
The architect will own the end-to-end strategy for directory services, Entra Privileged Identity Management (PIM), authentication, identity operations, and identity integrations.
You will act as a senior technical decision-maker and SME for identity architecture, establishing standards for MFA, Conditional Access, modern authentication, lifecycle controls, and Zero Trust while ensuring identity services support operational needs and regulatory obligations.
Enterprise Identity Architecture (AD and Hybrid Identity)
Lead the design and architecture of Active Directory and Microsoft Entra ID hybrid environments, including domain and forest strategy, AD and Entra migrations and consolidations, tenant integration, identity synchronization, and identity transition planning for mergers, acquisitions, and divestitures.
Define enterprise standards for identity lifecycle, identity operations, authentication, directory services, MFA, Conditional Access, and Entra Privileged Identity Management (PIM).
Architect high availability, disaster recovery, and scalability models for identity systems.
Lead modernization efforts such as legacy domain remediation, AD hardening, cloud identity integration, and secure Microsoft 365 administrative architecture.
Provide AD and Entra privileged-identity requirements and integration guidance to teams responsible for enterprise PAM platforms.
Identity Security Strategy & Zero Trust
Develop and enforce identity security strategy aligned to Zero Trust architecture principles.
Define and implement controls for tiered administration, privileged role activation through Entra PIM, PAWs, AD tiering, credential protection, MFA, Conditional Access, and attack surface reduction.
Lead initiatives to reduce identity-based risk, including privileged account sprawl, excessive standing access, stale accounts, and unmanaged service or non-human identities.
Drive adoption of passwordless and modern authentication technologies, including MFA, FIDO2, and Windows Hello for Business.
Partner with PAM and security teams to align AD and Entra privileged identities with least-privilege, just-in-time access, monitoring, and credential lifecycle controls.
Cross-Platform Identity Integration
Architect integration among Active Directory, Entra ID, Microsoft 365, IAM and identity governance platforms, identity security tools, and enterprise applications.
Define identity and access architecture standards across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), including workforce access, privileged roles, workload identities, federation, and governance.
Define standards for SSO, federation, and authentication protocols (SAML, OIDC, OAuth).
Oversee identity integration across on-premises, cloud, SaaS, and third-party systems, including appropriate integration with PAM platforms when privileged identities are in scope.