Senior Security Architect – AD/Entra ID
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Architect securing Microsoft Active Directory and Entra ID environments for GuidePoint Security’s cybersecurity clients. Designing IAM architecture, automating administration and resolving complex identity security issues.
Responsibilities:
- Lead evaluation, design and development of Active Directory and Azure Active Directory technical requirements, solutions and implementation roadmaps
- Develop and enforce IAM policies, standards and procedures
- Drive continuous improvement in IAM security architecture using emerging security technologies and practices
- Provide global project and operational teams with technical advice, guidance, expertise and risk analysis
- Translate requirements into architectural designs and influence deployment of infrastructure components
- Maintain expertise in Microsoft Entra ID and related core technologies
- Analyze Azure Active Directory environments, identify technical and operational challenges, and develop improvement solutions
- Maintain and optimize on-premises Active Directory infrastructure, including DNS, GPOs and domain controllers
- Lead or participate in complex troubleshooting, incident resolution and problem resolution with infrastructure teams
- Resolve technically complex security issues, internal control issues, critical incidents and crisis management matters
- Implement and enforce MFA and security best practices across user accounts and devices
- Develop and manage Microsoft Graph API integrations for automation and custom applications across Microsoft 365 services
- Create custom scripts for administrative-task automation and Graph API data retrieval
- Write and maintain advanced PowerShell scripts for provisioning, reporting and service configurations across Entra ID and Active Directory
- Partner with Identity, threat assessment and Cloud Security teams across IGA, PAM, IAM, AM and penetration testing
Requirements:
- 10+ years of relevant working experience in IT Security and IT Architecture
- 7+ years of experience with Active Directory architecture and infrastructure
- 3+ years of experience with Azure Active Directory architecture and design
- 5+ years of experience with Identity and Access Management (IAM) processes and technologies
- Proven expertise in designing and implementing IAM solutions in complex environments
- Expertise in Azure AD/Entra, including Conditional Access, MFA, hybrid environments, GPOs, on-premises Active Directory migrations and Azure AD Connect
- Experience with Microsoft Graph API for data retrieval and automation across Azure AAD
- In-depth knowledge of identity governance, authentication, authorization, federation, MFA, SSO and PAM
- Understanding of WS-Fed, OAuth and SAML
- Enterprise/Domain Admin and/or Azure Global Admin responsibilities
- Proven knowledge of managing Active Directory 2016/2019/2022 infrastructure for the Enterprise
- Strong experience in PowerShell and Microsoft Graph API
- Knowledge of Microsoft Security Stack: Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention and Compliance Center, including Litigation Hold, Retention and eDiscovery
- Strong communication and interpersonal skills
- Relevant certifications such as CISSP, CISM or Microsoft Certified: Identity and Access Administrator Associate are considered an asset
- Up to 10% travel
- Sedentary work
- Substantial movement of the wrists, hands and/or fingers for a minimum of 8 hours a day
- Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day
Benefits:
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family))
- HSA contributions: $850 per EE annually / $1750 per family annually
- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
- 12 corporate holidays
- Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option
- Collaboration, mentorship and guidance opportunities
Similar Jobs
Manager, Cyber Security
Cyber Security Manager leading incident response, detection engineering, and security operations. Protecting Ping Identity’s cloud identity platform and enterprise systems.
Senior Domain Consultant – AI Security
AI Security Domain Consultant securing enterprise AI agents, applications, data, and supply chains. Leading customer PoVs, executive demos, architectures, and Prisma AIRS roadmap feedback.
Information Security Engineer
Information Security Engineer securing Keyfactor’s cryptographic trust infrastructure. Managing monitoring, vulnerability assessments, incident response, and ISO 27001/SOC 2 compliance.
Cybersecurity Governance Analyst
Cybersecurity governance analyst developing enterprise policies, vendor risk assessments, and compliance controls. Supporting Agero’s digital driver assistance services through audits, remediation, and security awareness.
Senior Software Engineer – Security, Distributed Systems
Senior software engineer building backend distributed systems for RapidFort’s cybersecurity and software supply chain platform. Developing secure, scalable services across Linux, containers, Kubernetes, and cloud environments.
Staff Security Engineer, Proactive Security
Staff Security Engineer leading proactive security services, infrastructure protection, and secure engineering paths at DoorDash. Building resilient products for the technology and logistics company’s delivery network.
Managing Director, Enterprise Security Architecture – Engineering
Managing Director leading enterprise security architecture and cybersecurity platforms for The Cigna Group. Advancing cloud, DevSecOps, AI security, and cyber defense at scale.
Offensive Security Engineer / Penetration Tester
Offensive Security Engineer conducting web, mobile, Active Directory and cloud penetration tests for Genesis’s global product IT ecosystem. Building automation and AI-agent workflows for offensive security.
Senior Data Security Specialist – Data Security Strategy
Especialista sênior liderando estratégia de segurança e governança de dados corporativos. Proteção de informações sensíveis com DLP, DSPM, Purview e ambientes cloud.
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Information Security Engineer
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Senior Software Engineer, Security
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Head of IT, Security
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.