IAM Architect – Active Directory & Microsoft Entra ID

Job Summary We are seeking an experienced **IAM Architect** to lead enterprise-wide Identity and Access Management architecture, strategy, and modernization initiatives. The ideal candidate will bring extensive experience in Active Directory, Microsoft Entra ID (Azure AD), and enterprise Identity Governance & Administration (IGA) platforms, with the ability to design secure, scalable, and compliant identity solutions across hybrid and cloud environments. This role requires a combination of strategic architectural leadership, deep technical expertise, and the ability to guide engineering teams and collaborate with cross-functional stakeholders. Key Responsibilities * Own and define enterprise IAM architecture, technical standards, and long-term identity roadmaps. * Lead Active Directory modernization, including forest, domain, Group Policy, DNS, and security architecture. * Design and manage Microsoft Entra ID solutions, including Conditional Access, MFA, PIM, Identity Protection, and passwordless authentication. * Architect hybrid identity solutions using Entra Connect, Cloud Sync, federation, and seamless SSO. * Lead enterprise IGA architecture and integrations, preferably using Saviynt or SailPoint. * Design identity lifecycle management processes, including Joiner-Mover-Leaver (JML), automated provisioning, and deprovisioning. * Establish RBAC, segregation of duties (SoD), access certification, and identity governance policies. * Develop SSO and application integration standards using SAML, OAuth 2.0, OIDC, and SCIM. * Drive identity automation using PowerShell, Microsoft Graph API, and infrastructure-as-code. * Oversee privileged access governance, Zero Trust security, compliance, and identity-related audit requirements. * Manage Microsoft 365 and Entra ID licensing strategies, optimization, and reporting. * Provide technical leadership, mentor IAM engineers, and collaborate with security, HR, infrastructure, audit, and application teams. Required Qualifications & Technical Skills * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience. * 10+ years of professional experience in Identity and Access Management. * Recent experience in an IAM Architect, Identity Architect, or senior IAM technical leadership role. * Extensive hands-on expertise in Active Directory architecture, administration, security hardening, and modernization. * Strong experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, PIM, and Identity Protection. * Proven experience designing and implementing enterprise IGA platforms. * Strong understanding of Saviynt, SailPoint, or equivalent identity governance solutions. * Experience with hybrid identity architecture, Entra Connect, Cloud Sync, and federation. * Expertise in identity lifecycle management, RBAC, SoD, access reviews, and HR-driven provisioning. * Advanced PowerShell scripting and Microsoft Graph API experience. * Strong underst