Azure Security Architect

Job Title:

Experience:

Location:

Job Summary:

We are seeking a highly experienced Azure Security Architect with deep expertise in Active Directory, Microsoft Entra ID (Azure AD), and Privileged Access Management (PAM). The ideal candidate will lead the design, implementation, and governance of identity and access management solutions across hybrid environments, ensuring robust security protocols and compliance with enterprise standards.

Skillset:

Key Responsibilities:

• Architect and implement Azure AD, AD FS, and Azure AD Connect solutions, including AD 2016/2019 design.
• Lead identity lifecycle management with a focus on privileged access detection and mitigation.
• Design and enforce security protocols using OAuth2, OpenID Connect (OIDC), SAML, and PKI/AD CS.
• Implement and manage on-premises Active Directory and Privileged Access Management (PAM) strategies, including NTLM configurations.
• Develop and maintain PowerShell scripts and utilize Microsoft Graph API for automation and reporting.
• Collaborate with security and compliance teams to ensure alignment with Windows security standards and regulatory requirements.
• Conduct risk assessments and audits of privileged accounts and access patterns.
• Provide technical leadership and mentorship to junior engineers and stakeholders.

Required Skills & Qualifications:

• 10+ years of hands-on experience in Active Directory architecture.
• Strong expertise in Microsoft Entra ID (Azure AD), AD FS, and Azure AD Connect.
• Proven experience in Privileged Access Management (PAM) and identity governance.
• Deep understanding of NTLM, Kerberos, and hybrid identity models.
• Proficiency in OAuth2, OIDC, SAML, PKI, and AD Certificate Services.
• Advanced scripting skills in PowerShell and experience with Graph API.
• Familiarity with Privileged Access Workstations (PAWs) and tiered access models.
• Excellent troubleshooting, documentation, and communication skills.