Cloud Identity Architect — Entra & Identity Platform (Hybrid)

Mizuho; New York (NY); Hybrid; USD 112,000 - 205,000; Full time

Benefits offered by this job

Hybrid work program

Discretionary bonus

Job summary

Mizuho is seeking a Cloud Platform Architect with a focus on Microsoft Entra identity to own cloud identity as a platform capability within the Cloud Platform team. You will manage the Entra estate, hybrid identity, and security-first patterns across the Azure estate.

The role requires deep experience in enterprise-grade identity, regulation-aware governance, and hands-on automation to enable secure, auditable identity services. Hybrid work is available within a financial-regulated landscape.

Qualifications

• 7+ years in identity or infrastructure engineering with hands-on Microsoft Entra ID experience at enterprise scale
• Experience in regulated financial services or comparably regulated environment
• Strong command of Conditional Access design, Privileged Identity Management, hybrid identity, and workload identity patterns
• Experience owning an established identity estate and maturing its configuration, documentation, and controls
• Working knowledge of authentication standards (OIDC, OAuth 2.0, SAML) and modern authentication policy (MFA)
• Solid working knowledge of the broader Azure platform: RBAC, Azure Policy, Key Vault, and how identity integrates with core infrastructure services
• Familiarity with regulatory expectations for identity and access management
• Scripting and automation proficiency (PowerShell, Microsoft Graph API); IaC experience preferred

Responsibilities

• Design and operate secure, compliant identity for our Azure estate using Microsoft Entra ID, aligned to regulatory and internal audit requirements, including access control and MFA provisions
• Design, implement, and iterate Conditional Access policies, Privileged Identity Management, and entitlement management across the tenant
• Publish identity standards as both clear documentation and consumable patterns: reference designs, reusable Terraform modules, and paved-road configurations that make the standard the easiest path to follow
• Enforce identity guardrails through Azure Policy and automation rather than manual approval
• Own hybrid identity and the technical interface with the directory services team: Entra Connect scope, what synchronizes, what stays cloud-only, and how the boundary is controlled
• Design workload identity patterns for Azure services and pipelines: managed identities, workload identity federation, and service principal lifecycle
• Partner with Security, Risk, and Compliance to integrate regulatory controls and evidence collection into identity designs
• Represent cloud identity in audit and regulatory conversations

Skills

Identity engineering

Hybrid identity

Conditional Access

Privileged Identity Management

Workload identity

PowerShell

Microsoft Graph API

Terraform / IaC

Tools

Microsoft Entra ID

Azure

Azure Policy

RBAC

Key Vault

Job description

Mizuho is seeking a Cloud Platform Architect with a focus on Microsoft Entra identity to own cloud identity as a platform capability within the Cloud Platform team. You will manage the Entra estate, hybrid identity, and security-first patterns across the Azure estate.

The role requires deep experience in enterprise-grade identity, regulation-aware governance, and hands-on automation to enable secure, auditable identity services. Hybrid work is available within a financial-regulated landscape.