Overview In this senior role you define and govern global workforce identity Architecture for employees and partners across hybrid and cloud environments. You will standardize how identities are created, authenticated, and deprovisioned, driving secure and auditable access at scale. You'll shape lifecycle patterns, governance, and privileged access while collaborating with security, risk, and delivery teams. This is a strategic role focused on architecture, standards, and enablement, not daily tool administration. Join a team that values collaboration and global impact.
Compensation / Benefits- comprehensive health and wellness benefits
- retirement plans
- educational assistance and training
- paid maternity and parental bonding leave
- paid vacation, sick days, and holidays
Responsibilities- Define and maintain global workforce identity architecture using Microsoft Entra ID in hybrid and cloud environments
- Establish standard patterns for authentication, federation, Conditional Access, and MFA
- Design tenant-level identity integration patterns that scale across applications and regions
- Architect and standardize Joiner/Mover/Leaver (JML) identity lifecycle patterns driven by HR sources
- Ensure consistent provisioning, modification, and deprovisioning of workforce identities
- Reduce orphaned, dormant, and over-provisioned access through strong lifecycle design
- Define workforce identity governance standards, including access requests, access reviews, and separation of duties (SoD)
- Architect privileged access models for workforce identities, including PIM and Just-In-Time access
- Ensure access models are auditable and aligned to regulatory and risk expectations
- Leverage analytics and AI-assisted capabilities to improve role and entitlement design
- Reduce access certification noise by improving role quality, review scoping, and access rationalization
- Translate analytic insights into architectural improvements rather than one-off reporting
- Define B2B and partner identity patterns using Entra ID that enable collaboration while maintaining centralized governance
- Ensure third-party access aligns with global standards and workforce identity controls
- Partner with IAM Governance teams to define and consume workforce identity metrics, including access quality, review effectiveness, and lifecycle hygiene
- Use metrics to continuously improve identity architecture and reduce access risk
Key requirements- 8-10+ years of experience in identity, access management, or security architecture roles
- Deep expertise in Microsoft Entra ID architecture in hybrid environments
- Strong experience designing JML lifecycle, identity governance, and privileged access controls
- Ability to design auditable, regulator defensible access models
- Proven ability to influence across technical and non-technical stakeholders
- collaboration across architecture, engineering, security, risk, and audit teams
- influence without direct authority
- translate complex identity concepts into clear standards
- Microsoft Entra ID (Azure AD)
- Authentication and federation
- Conditional Access and MFA
