Entra ID – AD Architect

Jobtailor; Austin (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Jobtailor in Austin is seeking an experienced Identity Architect to lead end-to-end hybrid identity initiatives. You will integrate on-prem Active Directory with Entra ID and Entra Connect, design target-state architectures, and govern authentication flows across SSO, SAML, and OIDC.

You will automate operations via PowerShell and Microsoft Graph API, mentor engineers, and deliver comprehensive documentation for security and reliability.

Qualifications

• Bachelor in Computer Science or related field.
• 15+ years of professional experience in identity or security architecture.
• Fluency in English (written and verbal).

Responsibilities

• Own end-to-end hybrid identity architecture spanning on-prem AD, Entra ID, and Entra Connect/Cloud Sync.
• Design target-state identity reference architectures including auth flows and trust topologies.
• Configure Entra ID capabilities: SSO/SAML/OIDC, app registrations, App Proxy, governance, and lifecycle workflows.
• Automate identity operations using PowerShell and Microsoft Graph API.
• Partner with SecOps on identity threat detection and incident response.
• Act as Tier 3 escalation for complex identity incidents and outages.
• Produce high-quality documentation: HLDs/LLDs, runbooks, and architecture decision records.
• Mentor engineers and uplift the team’s identity capability through reviews.

Skills

Hybrid identity architecture

Entra ID configuration

PowerShell automation

Identity threat detection

Documentation production

Education

Bachelor's degree in Computer Science or related field

Tools

Active Directory

Entra ID

SAML

OIDC

Microsoft Graph API

Entra Connect

App Proxy

Defender for Identity

Identity Protection

Job description

• Own the end-to-end architecture for hybrid identity spanning on-premises Active Directory, Entra ID, and Entra Connect / Cloud Sync.
• Design and document target-state identity reference architectures, including authentication flows, trust topologies, forest/domain design, and tenant strategy.
• Configure and optimize Entra ID capabilities: SSO/SAML/OIDC federation, application registrations & enterprise apps, App Proxy, B2B/B2C, dynamic groups, and Entra ID Governance (access reviews, entitlement management, lifecycle workflows).
• Automate identity operations using PowerShell and Microsoft Graph API.
• Partner with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response for identity-based attacks (Golden Ticket, password spray, token theft, etc.).
• Act as Tier 3 / final escalation for complex identity incidents and outages.
• Establish standards, best practices, and guardrails; review designs from junior engineers and vendor partners.
• Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, and architecture decision records.
• Mentor engineers and uplift the broader team's identity capability through knowledge transfer and design reviews.

Requirements

• Education – Bachelor in Computer Science or related field.
• Experience – Minimum 15 Years in field.
• Fluency in English Language – written & verbal.

Core Competencies

Demonstrates expertise in hybrid identity architecture, including Active Directory and Entra ID, with a strong focus on automation, security, and documentation. Proven ability to mentor teams and establish best practices in identity management.

Highest-signal resume keywords

• Hybrid Identity Architecture
• Entra ID Configuration
• PowerShell Automation
• Identity Threat Detection
• Documentation Production

ATS Optimization Keywords

Hard Skills

• Active Directory
• Entra ID
• SAML
• OIDC
• Microsoft Graph API
• Identity Governance
• Authentication Flows
• Trust Topologies
• Dynamic Groups
• Incident Response

Soft Skills

• Mentoring
• Knowledge Transfer
• Collaboration

Industry Keywords

• Identity Management
• Access Reviews
• Entitlement Management
• Lifecycle Workflows
• Best Practices

Tools & Technologies

• Entra Connect
• App Proxy
• Defender for Identity
• Identity Protection