Azure Active Directory/ IAM Architect (Onsite role)

Role: Identity Access AdministratorCompany: Morph Enterprise

Job description

Tentative interview dates: April 23rd and 24th Onsite interviews are preferred but there will be a virtual interview format for non-local candidates. 40% onsite 60% remote Preferred/required Skills: • Proven experience as a Microsoft Azure Active Directory Architect or similar role. • Knowledge of modern authentication protocols such as OAuth, OpenID Connect (OIDC), Kerberos, NTLM, LDAP. • In-depth knowledge of Azure AD services, including but not limited to user and group management, conditional access, identity protection, multi-factor authentication, and Azure AD Connect. • Strong understanding of identity and access management (IAM) concepts, including RBAC, PIM, SSO, and federation. • Experience with PowerShell scripting and automation tools for Azure AD administration. Preferred Skills: Industry certification such as Microsoft Certified (Azure Solutions Architect Expert, Microsoft Certified, Identity and Access Administrator Associate, or equivalent certifications in cloud security and identify management are preferred Scoring: 20% Cost 30% Knowledge of Entra ID and Azure AD 20% Problem Solving Skills 25% Identity and Access Management Security best practices 5% Presentation Skills Job Title: Entra ID (Microsoft Azure Active Directory) Architect Job Overview: As the Microsoft Entra ID Architect, you will be responsible for designing, implementing, and managing identity and access management solutions using the Entra ID platform, and Microsoft Active Directory as well as supporting the deployment and management of identity and access management solutions across the enterprise. You will work closely with stakeholders, Information Technology (IT) operations, and security teams, to understand business requirements and translate them into scalable and secure identity solutions. Your role involves defining architecture standards, implementing best practices, and ensuring compliance with security and regulatory requirements. Key Responsibilities: • Design and Architecture: • * Collaborate with stakeholders, Information Technology (IT) operations and security teams, to gather requirements and design scalable, secure, and high-performance identity solutions using Microsoft Entra ID and Active Directory. • Define architecture standards, reference architectures, and design patterns for identity and access management in alignment with Entra ID platform requirements and industry best practices. • Conduct architecture reviews, assess technical feasibility, and recommend solutions that meet business needs while adhering to security, compliance, and performance requirements. • ID Implementation and Integration: • * Lead the implementation and configuration of Azure Active Directory services, including user provisioning, authentication, single sign-on (SSO), and multi-factor authentication (MFA). • Integrate Entra ID and Active Directory platform components and third-party applications to enable seamless user access and authentication experiences. • Configure Entra ID Connect for directory synchronization and identity federation with on-premises Active Directory environments, if applicable. • Governance and Security: • * Define and implement identity governance policies, role-based access control (RBAC) models, and entitlement management workflows to ensure least privilege access and compliance. • Implement security controls and monitoring mechanisms to protect Azure AD resources, including conditional access policies, identity protection, and privileged identity management (PIM). • Conduct security assessments, vulnerability scans, and audits to identify and remediate security risks and compliance gaps related to Azure AD configurations. • Lifecycle Management: • * Define and automate identity lifecycle management processes, including user provisioning, deprovisioning, and account lifecycle policies, to streamline administrative tasks and improve operational efficiency. • Implement self-service capabilities for users, such as password reset, group management, and profile updates, to reduce helpdesk requests and enhance user experience. • Monitor identity-related events and metrics, such as user activity logs, sign-in logs, and authentication failures, to detect and respond to security incidents and anomalous behavior. • and Knowledge Sharing: • * Collaborate with cross-functional teams, including developers, system administrators, and security analysts, to ensure seamless integration of identity solutions with Entra ID platform components. • Provide guidance, training, and mentorship to team members and stakeholders on Entra ID best practices, capabilities, and features. • Stay informed about Entra ID updates, new features, and industry trends, and share knowledge with the team to drive continuous improvement and innovation. Qualifications: • Proven experience (5+ years) in architecting, implementing, and managing identity and access management solutions using Microsoft Azure Active Directory. • Expertise in Microsoft Azure services, including Entra ID, Entra ID Connect, Entra ID B2B/B2C, Azure Multi-Factor Authentication, and Azure Identity Protection. • Strong understanding of identity standards and protocols, such as OAuth, OpenID Connect, SAML, LDAP, and Kerberos. • Experience with identity governance frameworks, RBAC models, and security best practices for cloud-based identity solutions. • Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization. • Industry certifications such as Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Identity and Access Administrator Associate, or equivalent certifications in cloud security and identity management are preferred. • Knowledge and experience with other Identity Provider (IdP) solutions (ping, Forgerock, Okta) Application Questions • How many years of experience do you have administering Azure AD/Entra ID? • How many years of experience do you have administering Microsoft Active Directory? • How many years of experience do you have administering Single Sign On solutions? • How many years of experience do you have designing and integrating Identity and Access Management (IAM) solutions? • How many years of experience do you have as a technical lead to other team members?

Requirements

• 30% Knowledge of Entra ID and Azure AD

• 20% Problem Solving Skills

• 25% Identity and Access Management Security best practices

• Proven experience (5+ years) in architecting, implementing, and managing identity and access management solutions using Microsoft Azure Active Directory

• Expertise in Microsoft Azure services, including Entra ID, Entra ID Connect, Entra ID B2B/B2C, Azure Multi-Factor Authentication, and Azure Identity Protection

• Strong understanding of identity standards and protocols, such as OAuth, OpenID Connect, SAML, LDAP, and Kerberos

• Experience with identity governance frameworks, RBAC models, and security best practices for cloud-based identity solutions

• Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization

• Knowledge and experience with other Identity Provider (IdP) solutions (ping, Forgerock, Okta)

• How many years of experience do you have administering Azure AD/Entra ID?

• How many years of experience do you have administering Microsoft Active Directory?

• How many years of experience do you have administering Single Sign On solutions?

• How many years of experience do you have designing and integrating Identity and Access Management (IAM) solutions?

• How many years of experience do you have as a technical lead to other team members?

SHARE THIS OPENING

Similar jobs

ACTIVE DIRECTORY ADMIN

Invalid date

TekTRnd

New York, New York

Azure

Java

Python

TekTRnd is seeking an Active Directory Admin to lead the architectural design and implementation of Active Directory, Azure, and Unix Kerberos. This role involves hands-on engineering and management of enterprise-scale security services.

Application Security Engineer - Remote

Invalid date

Ryder

Honolulu, HI

CI/CD

Azure

Azure Devops

_Job Seekers can review the Job Applicant Privacy Policy by clicking HERE. ( SUMMARY We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly technical and candidates must possess a solid understanding of the security and privacy of our company's applications and data. The Application Security Engineer must understand development, coding, security engineering, and secure systems configurations. This position ensures that every step of the software development lifecycle (SDLC) follows security best practices. This involves conducting security assessments with SAST and DAST tools, reading source code, threat modeling, and designing and implementing secure software development practices. They will determine where security vulnerabilities exist and implement fixes. They must understand how an application may be misused and exploited. The Application Security Engineer will collaborate with software development teams and provide guidance on best practices for secure coding. They will also stay up to date on the latest security trends and technologies and integrate them into the organization's security strategy. The ideal candidate will have strong analytical and problem-solving skills, as well as experience in application security and knowledge of programming languages and web technologies. A Bachelor's degree in Computer Science and certifications such as CISSP, OSCP, or CASE are preferred. ESSENTIAL FUNCTIONS Conduct security assessments that require expertise of our organization's applications using both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies. Collaborate with software development teams to integrate security into the development life cycle. Conduct security assessments of web, mobile, and other applications. Analyze security assessment results to identify security vulnerabilities and provide guidance on remediation. Design and implement secure software development practices, including threat modeling, secure coding standards, and code review. Stay current with security threats, trends, and technologies, and recommend new security controls as needed. Conduct application security investigations and provide recommendations to mitigate risk. Maintain security documentation, provide subject matter expertise, and collaborate on security policies, procedures, and standards. ADDITIONAL RESPONSIBILITIES Performs other duties as assigned. EDUCATION Bachelor's degree in computer science, information security, or a related field EXPERIENCE Five (5) years or more experience with OWASP, SAST, DAST, SCA, RASP and common security tools, required. Seven (7) years or more application security, security engineering, software development, or a related field, required. Five (5) years or more strong understanding of web application security and common attack vectors. (e.g. SQL injection, XSS, CSRF), required. Five (5) years or more experience with secure coding practices, threat modeling, and secure software development life cycle (SDLC) methodologies. required Five (5) years or more proven experience in diagnosing, isolating, resolving complex issues and recommending/implementing strategies to resolve problems, required. Five (5) years or more demonstrated experience with systems integration processes, methodology and tools, required. Seven (7) years or more development and scripting experience, required. Five (5) years or more professional application security role, required. Five (5) years or more experience with API and Web Security, required. Three (3) years or more experience with WAF, or similar application security infrastructure a plus, preferred. Seven (7) years or more experience in integrating security in CI/CD, DevOps, required. Six (6) years or more experience process or operation management Six (6) years or more experience Value Stream Mapping, Continuous Flow, Pull Replenishment and other process improvement experience. SKILLS Excellent communication skills, both verbal and written, and the ability to work effectively with cross-functional teams. Ability to create and maintain professional relationships within all levels of the organization (peers, work groups, customers, supervisors). Ability to work independently and as a member of a team. Flexibility to operate and self-driven to excel in a fast-paced environment. Capable of multi-tasking, highly organized, with excellent time management skills Proficiency in at least one programming language (e.g. Python, .NET, Javascript) with .NET preferred., advanced, required. Proficiency in at least one common scripting language (e.g. PowerShell, bash, etc.), advanced, required. Familiarity of NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations, expert, required. CI/CD experience with Azure Devops, Terraform or other automation and integration technologies, expert, required. Risk management findings, vulnerability prioritization, threat modeling, and mitigation strategy, advanced, required. LICENSES CISSP, OSCP, CASE, or other industry-leading certifications, preferred. TRAVEL 1-10% Applicants from California, Colorado, Hawaii, New Jersey, New York City, and Washington: Salary is determined based on internal equity; internal salary ranges; market data/ranges; applicant’s skills; prior relevant experience; certain degrees or certifications, etc. The salary for this position ranges from $120,000.00 to $150,000.00. Employees may also be eligible to receive an annual bonus, as applicable. Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax advantaged 401(k) retirement savings plan Job Category: Information Security Ryder is proud to be an Equal Opportunity Employer and Drug Free workplace. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability. _Job Seekers can review the Job Applicant Privacy Policy by clicking HERE. ( Current Employees: If you are a current employee at Ryder (not a Contractor or temporary employee through a staffing agency), please click here ( to log in to Workday to apply using the internal application process. #wd

Sr Application Security Engineer

Apr 17, 2025

Stifel

St. Louis, Missouri

Stifel is seeking a Sr Application Security Engineer to ensure secure design and testing of software throughout the development life cycle. The role requires strong technical expertise in cybersecurity and software development, along with leadership experience.

Save job

Apply now

Job Type

Fulltime role

Skills required

Azure

Location

Salt Lake City, Utah

Salary

No salary information was found.

Date Posted

April 18, 2025

Save job Apply now

Similar jobs

ACTIVE DIRECTORY ADMIN

Invalid date

TekTRnd

New York, New York

Azure

Java

Python

Application Security Engineer - Remote

Invalid date

Ryder

Honolulu, HI

CI/CD

Azure

Azure Devops

Sr Application Security Engineer

Apr 17, 2025

Stifel

St. Louis, Missouri

Morph Enterprise

Morph Enterprise is seeking an Azure Active Directory/IAM Architect to design and manage identity solutions. This role involves collaboration with IT and security teams to implement best practices in identity and access management.

Grow your career with our tailored content for Microsoft techies

Learn more