Microsoft Entra ID Architect

Job: Microsoft Entra ID ArchitectLocation: Boston, MA / Jersey City, New Jersey(Onsite)Job Type: || Full time||Key ResponsibilitiesServe as the lead architect for Microsoft Entra ID, defining long‑term identity and access strategies aligned to Zero Trust and enterprise security objectives.Design and govern Conditional Access frameworks that balance security, usability, and operational scalability across workforce, partner, and privileged identities.Define security guardrails and architectural standardsArchitect privileged access models using least‑privilege and just‑in‑time principles, including role design, separation of duties, and blast‑radius reduction.Act as a advisor to Security, and Infrastructure translating identity risk into actionable architectural decisions.Partner with IAM, cloud security, endpoint, and application teams to ensure consistent policy enforcement across the enterprise.Evaluate emerging identity threats and platform capabilities, evolving Conditional Access and identity controls accordingly.Review and approve complex identity designs, exceptions, and risk acceptances.Required Experience & Expertise7–10 years of progressive experience in Identity & Access Management , with significant focus on cloud identity platforms.Deep, hands‑on expertise with Microsoft Entra ID , including tenant architecture and advanced security controls.Proven experience designing Conditional Access policies at scale , including risk‑based access, session controls, and authentication strength enforcement.Strong understanding of identity attack vectors , token theft, privilege escalation, and identity‑centric threat models.Experience operating in regulated, audit‑driven environments with high expectations for control design and documentation.Ability to communicate complex security concepts clearly to senior IT, security, and risk executives .Extensive experience scripting against Microsoft Graph API for automation, reporting, and advanced identity management tasks.Preferred QualificationsExperience in consulting or advisory roles supporting large enterprises.Background in Zero Trust architecture or identity security strategy.Industry certifications in security, identity, or cloud architecture (preferred, not required).Experience working in large enterprise environment.