Security Architect

Neurealm; Pune District, Chennai, Bengaluru; On-site; INR 600,000 - 900,000; Full time

Job summary

Neurealm Company in Pune invites an experienced Privileged Access & Identity Security Architect to strengthen Entra ID and hybrid Active Directory security. The role focuses on implementing PIM, Conditional Access, Access Reviews and Zero Trust at enterprise scale.

You will govern identities, service principals, managed identities, app registrations and privileged API permissions, and defend against AI-powered phishing and Kerberos attacks while shaping identity policies across teams.

Qualifications

• 10+ years of IAM/Identity Security experience.
• Deep hands-on expertise in Entra ID and Active Directory security.
• Proven experience designing and rolling out PIM, Conditional Access and Access Reviews at enterprise scale.
• Strong understanding of Zero Trust and privileged-access architecture.
• Experience with phishing-resistant authentication including FIDO2, passkeys and Windows Hello for Business.
• Strong understanding of Tier 0 protection, Entra Connect/Cloud Sync and hybrid identity security.
• Ability to govern service principals, managed identities, app registrations and privileged API permissions.
• Strong understanding of identity threats including AiTM phishing, token replay, consent phishing, Kerberos attacks and DCSync.
• Ability to define identity policies and standards and drive their adoption across teams.

Skills

IAM architecture

Entra ID

Hybrid Identity

PIM

Conditional Access

Access Reviews

Zero Trust

FIDO2/WebAuthn

Passkeys

Windows Hello for Business

Kerberos attacks awareness

DCSync understanding

Tools

Entra ID

Active Directory

Azure AD Connect

Cloud Sync

Privileged Access Management

Job description

Privileged Access & Identity Security Architect - Entra ID

We are looking for someone with deep identity security architecture expertise, particularly across Microsoft Entra ID and hybrid Active Directory.

What we need:

• 10+ years of IAM/Identity Security experience.
• Deep hands-on expertise in Entra ID and Active Directory security.
• Proven experience designing and rolling out PIM, Conditional Access and Access Reviews at enterprise scale.
• Strong understanding of Zero Trust and privileged-access architecture.
• Experience with phishing-resistant authentication including FIDO2, passkeys and Windows Hello for Business.
• Strong understanding of Tier 0 protection, Entra Connect/Cloud Sync and hybrid identity security.
• Ability to govern service principals, managed identities, app registrations and privileged API permissions.
• Strong understanding of identity threats including AiTM phishing, token replay, consent phishing, Kerberos attacks and DCSync.
• Ability to define identity policies and standards and drive their adoption across teams.