CIAM Architect - Entra ID, Zero Trust, 12-Month Contract

Xcede; Porto; Presencial; EUR 70 000 - 95 000; Tempo integral

Resumo da oferta

Xcede is seeking a CIAM Architect to own the end-to-end solution architecture for Microsoft Entra ID Conditional Access, guiding policy decisions, governance, and deployment for a large enterprise. Based in Porto, this 12-month contract involves collaboration with security, architecture and engineering teams across the IAM program.

You will design a ring-based Zero Trust model, define membership rules and attribute sources, and mentor consultants within the IAM Centre of Excellence.

Qualificações

• Deep expertise in Microsoft Entra ID (Azure AD) and Conditional Access.
• Proven experience designing Zero Trust access architectures for large enterprises.
• Strong understanding of policy-based and attribute-based access control models.
• Experience with security-group governance and access certification.
• Knowledge of device compliance and baselines (Intune).
• Leadership of identity transformations in regulated environments.

Responsabilidades

• Own the end-to-end solution architecture for Entra ID Conditional Access as the policy layer.
• Define governance framework, naming and tagging standards for CA policies and security groups.
• Design the Zero Trust persona and ring-based model aligned to best practices.
• Define target security-group model, membership rules and attribute sources.
• Establish management controls, ownership model and attestation approach.
• Lead design authority reviews and approve deviations from standard.
• Define deployment strategy with validation, ring gating and rollback criteria.
• Act as principal technical interface to stakeholders across architecture and security teams.
• Mentor consultants and developers and provide escalation into IAM Centre of Excellence.

Conhecimentos

Entra ID (Azure AD)

Conditional Access

Zero Trust architecture

Identity Governance

Policy-based access control

Entitlement design

Stakeholder management

Executive communication

Intune / device compliance

Security architecture

Ferramentas

Azure AD

Microsoft Intune

Descrição da oferta de emprego

Xcede is seeking a CIAM Architect to own the end-to-end solution architecture for Microsoft Entra ID Conditional Access, guiding policy decisions, governance, and deployment for a large enterprise. Based in Porto, this 12-month contract involves collaboration with security, architecture and engineering teams across the IAM program.

You will design a ring-based Zero Trust model, define membership rules and attribute sources, and mentor consultants within the IAM Centre of Excellence.