Microsoft Entra ID Architect (Security & Conditional Access Focus)

Job: Microsoft Entra ID Architect (Security & Conditional Access Focus)

Location: Boston, MA / New Jersey (Onsite)

Employment Type: Full-Time

Experience: 7–10 Years

Job Description

We are seeking an experienced Microsoft Entra ID Architect to lead the design, governance, and security architecture of enterprise-scale identity platforms. The ideal candidate will serve as a trusted advisor to Security, Infrastructure, and IAM leadership teams, driving Zero Trust identity strategies and implementing advanced identity security controls.

This role requires deep expertise in Microsoft Entra ID , Conditional Access , Privileged Access Management , and Identity Security Architecture , with the ability to design secure, scalable, and compliant identity solutions across large enterprise environments.

Key Responsibilities

• Lead enterprise-wide Microsoft Entra ID architecture and identity modernization initiatives.
• Design and implement Conditional Access policies, authentication strength controls, and risk-based access strategies.
• Define identity governance standards, security guardrails, and access management frameworks.
• Architect privileged access models using least-privilege, Just-In-Time (JIT), and separation-of-duties principles.
• Drive Zero Trust identity and access management strategies.
• Collaborate with IAM, Cloud Security, Endpoint Security, and Application teams to ensure consistent policy enforcement.
• Assess identity threats, privilege escalation risks, token theft scenarios, and implement mitigation controls.
• Develop automation and reporting solutions using Microsoft Graph API.
• Review complex identity designs, security exceptions, and risk acceptance requests.
• Present security architecture recommendations to senior technical and executive stakeholders.

Required Skills

• Microsoft Entra ID (Azure AD)
• Conditional Access Policy Design & Governance
• Identity & Access Management (IAM)
• Zero Trust Architecture
• Identity Governance & Administration (IGA)
• Privileged Access Management (PAM)
• Privileged Identity Management (PIM)
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• RBAC (Role-Based Access Control)
• Authentication Strength Policies
• Risk-Based Access Controls
• Microsoft Graph API
• Identity Security Architecture
• Identity Threat Protection
• Tenant Architecture & Administration
• Least Privilege & Just-In-Time Access
• Identity Lifecycle Management
• Cloud Security
• Security Compliance & Audit Controls