Entra ID Architect

Programmers.io; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Job summary

Programmers.io in Boston, MA is seeking a seasoned Entra ID Architect to lead design, governance, and security architecture of a large-scale identity platform. The role targets a trusted advisor to security leadership, shaping identity strategy as a core Zero Trust pillar.

The candidate will define tenant-level identity architecture with emphasis on Conditional Access and privileged access controls, translating risk into architectural decisions for executive stakeholders.

Qualifications

• 7–10 years of progressive experience in Identity & Access Management (IAM).
• Deep, hands-on expertise with Microsoft Entra ID, including tenant architecture and advanced security controls.
• Proven experience designing Conditional Access policies at scale (risk-based access, session controls, authentication strength).
• Strong understanding of identity attack vectors, token theft, privilege escalation, and identity-centric threat models.
• Experience in regulated, audit-driven environments with demand for control design and documentation.
• Ability to communicate complex security concepts clearly to executives.
• Experience scripting against Microsoft Graph API for automation, reporting, and identity management tasks.

Responsibilities

• Serve as the lead architect for Microsoft Entra ID, defining long-term identity strategies aligned with Zero Trust.
• Design and govern Conditional Access frameworks balancing security, usability, and scalability.
• Define security guardrails and architectural standards.
• Architect privileged access models using least-privilege and just-in-time principles.
• Advise Security and Infrastructure translating identity risk into architectural decisions.
• Partner with IAM, cloud security, endpoint, and application teams to enforce policies enterprise-wide.
• Evaluate emerging identity threats and platform capabilities to evolve controls.
• Review and approve complex identity designs, exceptions, and risk acceptances.

Skills

Microsoft Entra ID

Identity & Access Management

Conditional Access

Zero Trust

Graph API scripting

Job description

Entra ID Architect (Security & Conditional Access Focus)

Experience: 7–10 years

Role Overview:

We are seeking a Microsoft Entra ID Architect to lead the design, governance, and security architecture of a large‑scale identity platform. This role is suited for a seasoned consultant who has moved beyond implementation and now operates as a trusted advisor to security and infrastructure leadership, shaping identity strategy as a core component of Zero Trust.

The successful candidate will define tenant‑level identity architecture, with particular emphasis on Conditional Access policy design, privileged access controls, and attack‑path reduction. This role requires both deep technical authority and the ability to articulate risk‑based design decisions to executive stakeholders.

Key Responsibilities:

• Serve as the lead architect for Microsoft Entra ID, defining long‑term identity and access strategies aligned to Zero Trust and enterprise security objectives.
• Design and govern Conditional Access frameworks that balance security, usability, and operational scalability across workforce, partner, and privileged identities.
• Define security guardrails and architectural standards
• Architect privileged access models using least‑privilege and just‑in‑time principles, including role design, separation of duties, and blast‑radius reduction.
• Act as a advisor to Security, and Infrastructure translating identity risk into actionable architectural decisions.
• Partner with IAM, cloud security, endpoint, and application teams to ensure consistent policy enforcement across the enterprise.
• Evaluate emerging identity threats and platform capabilities, evolving Conditional Access and identity controls accordingly.
• Review and approve complex identity designs, exceptions, and risk acceptances.

Required Experience & Expertise:

• 7–10 years of progressive experience in Identity & Access Management , with significant focus on cloud identity platforms.
• Deep, hands‑on expertise with Microsoft Entra ID , including tenant architecture and advanced security controls.
• Proven experience designing Conditional Access policies at scale , including risk‑based access, session controls, and authentication strength enforcement.
• Strong understanding of identity attack vectors , token theft, privilege escalation, and identity‑centric threat models.
• Experience operating in regulated, audit‑driven environments with high expectations for control design and documentation.
• Ability to communicate complex security concepts clearly to senior IT, security, and risk executives .
• Extensive experience scripting against Microsoft Graph API for automation, reporting, and advanced identity management tasks.

Preferred Qualifications:

• Experience in consulting or advisory roles supporting large enterprises.
• Background in Zero Trust architecture or identity security strategy.
• Industry certifications in security, identity, or cloud architecture (preferred, not required).
• Experience working in large enterprise environment.