Cloud Security, IAM Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Microsoft Cloud Security/IAM Architect securing Dataverse and Dynamics environments for federal IT infrastructure. Designing identity controls, sensitive-data protections, auditing, monitoring, and incident-response documentation.
Responsibilities:
- Design and support Microsoft cloud security and IAM controls beyond default Dynamics security
- Implement and manage Conditional Access, Privileged Identity Management, least privilege, MFA, and authentication controls
- Configure and document Dataverse/Dynamics security, including roles, business units, teams, record ownership/sharing, table privileges, column/field security, audit controls, and restricted record access
- Protect sensitive, whistleblower, confidential investigative, and regulated data
- Design administrative and emergency access
- Implement privileged-action logging, audit logging, monitoring, and security testing/validation
- Develop incident-response playbooks and documentation
- Integrate Microsoft Purview/DLP, Sentinel, or equivalent SIEM capabilities
- Support regulated federal IT infrastructure and cybersecurity operations
Requirements:
- 7+ years of cybersecurity/IAM/cloud security experience
- 3+ years of Microsoft cloud identity/security experience
- Experience with Microsoft Entra ID
- Experience with Conditional Access
- Experience with Privileged Identity Management
- Knowledge of RBAC and least privilege
- Knowledge of MFA and authentication controls
- Dataverse/Dynamics security knowledge
- Sensitive-data protection experience
- Security logging and audit experience
- Security testing/validation experience
- Incident-response playbook experience
- Experience designing administrative/emergency access
- Experience documenting security control configurations for regulated systems
- Understanding of Dataverse security roles, business units, teams, record ownership/sharing, table privileges, column/field security, audit, restricted record access, and interaction between Dataverse controls and Power Platform solutions
- Preferred certifications/qualifications include one or more of: CISSP, SC-100 Cybersecurity Architect, AZ-500 Azure Security Engineer, SC-300 Identity and Access Administrator, or Microsoft Power Platform security experience/certification
- Strong differentiators include government Inspector General/security experience; whistleblower/confidential investigative records experience; experience with CJIS, healthcare, financial, legal, regulatory, or similarly restricted datasets; and Microsoft Purview/DLP or Sentinel/equivalent SIEM integration
Benefits:
- Competitive Employee Health Insurance options including dental
- 100% company paid vision plan
- 401K plan with generous company match and no vesting period
- 100% company paid life insurance
- 100% company paid long and short-term disability insurance
- Training allowance
- PTO
Similar Jobs
Staff AI Security Engineer
Staff AI Security Engineer securing Addepar’s global investment data and AI platform. Leading AI security architecture, guardrails, governance, automation, and organization-wide security initiatives.
Information Security Consultant – SMB
Information Security Consultant delivering GRC advisory services for Cognisys, a cybersecurity consultancy. Strengthening client governance, risk management and compliance across recognised security frameworks.
Security Engineer
Security Engineer securing AlertMedia’s risk intelligence and response SaaS platform. Improving AWS, application, compliance, monitoring, and customer security capabilities.
Staff Product Security Engineer
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy-now-pay-later platform. Designing secure, scalable CIAM backend systems and integrations.
Staff Product Security Engineer
Staff Product Security Engineer building CIAM backend services for Affirm’s buy-now-pay-later platform. Securing authentication, authorization, and account lifecycle flows at scale.
Application Security Consultant
Application Security Consultant advising inovex clients on secure architectures, SDLC, vulnerability management, and software supply-chain security. Developing trainings, reviewing applications, and advancing security consulting products.
Security Engineer
Palo Alto Networks Security Engineer optimizing NGFW security policies and Cortex XDR for Arctiq’s technology-services clients. Automating administration and troubleshooting complex network security issues.
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
Lead Security Engineer
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.