We are seeking an experienced and strategic Identity and Access Management (IAM) Architect to lead the design, implementation, and governance of our enterprise identity and access solutions. The ideal candidate will bring deep technical expertise in IAM, a hands-on approach to Microsoft 365 and Azure AD, and the ability to work across cross-functional teams to support security, compliance, and operational excellence.
Roles and Responsibilities
- Design, implement, and govern scalable IAM solutions aligned with organizational security and compliance requirements.
- Lead architecture and strategy efforts across identity platforms including Azure AD, Microsoft 365, Intune, Autopilot, and Defender.
- Develop and maintain IAM policies, standards, and procedures including MFA, SSO, conditional access, and lifecycle management.
- Manage relationships and technical delivery with Managed Service Providers (MSPs).
- Collaborate with security, infrastructure, and application teams to integrate IAM best practices across the enterprise.
- Provide expert guidance on user provisioning, access reviews, entitlement management, and privileged access control.
- Deliver regular updates and recommendations to senior leadership and stakeholders.
- Evaluate and implement IAM tools and platforms such as Delinea or comparable technologies.
- Lead or support deployment of external identity providers (IDP) and customer IAM provisioning strategies.
Required Qualifications
- Proven experience in Identity and Access Management architecture and governance.
- Hands-on experience with the Microsoft 365 ecosystem including Azure AD, Intune, Autopilot, and Defender.
- Strong knowledge of core IAM principles including SSO, MFA, conditional access, and identity lifecycle management.
- Experience managing technical delivery through MSPs.
- Excellent communication and leadership skills, with the ability to influence stakeholders at all levels.
- Familiarity with IAM tools such as Delinea, CyberArk, Okta, or similar platforms.
Preferred Qualifications
- Experience in deploying and managing external IDPs and customer identity provisioning.
- Background in infrastructure engineering or security architecture.
- Relevant certifications (e.g., Microsoft Certified: Identity and Access Administrator, CISSP, Azure Solutions Architect, etc.).
- Ability to work independently and manage multiple priorities in a fast-paced, dynamic environment.