Entra ID Consultant

Themesoft Inc; Chicago (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

Themesoft Inc. is seeking a Senior IAM Security Architect to lead the design and implementation of workforce identity, authentication, and access management solutions in a hybrid cloud environment.

You will guide architecture decisions, review security proposals, and ensure alignment with Zero Trust and least-privilege principles. Ideal candidates bring deep expertise in Microsoft Entra ID, OAuth/OIDC, SSO, MFA, and entitlement management, with hands-on experience securing microservices and

Job description

Domain: Cybersecurity – Identity & Access Management (IAM) / Information Security

Key Responsibilities

• Lead the design and implementation of workforce identity, authentication, authorization, and access management solutions.
• Develop identity architectures and access patterns aligned with Zero Trust, least privilege, defense-in-depth, and modern security principles.
• Provide technical leadership and architectural guidance for Microsoft Entra ID and related IAM security solutions.
• Evaluate and implement AI-driven identity solutions, including agentic identity, AI adoption patterns, and secure authentication workflows.
• Review security solutions proposed by stakeholders and provide expert consultation to IT management and partner teams.
• Design and implement authentication and authorization mechanisms using OAuth 2.0, OpenID Connect (OIDC), SAML, SSO, MFA, Kerberos, LDAP, and identity federation.
• Secure Java-based microservices, React frontends, and Android/iOS applications across Azure and hybrid environments.
• Implement application registration, application integration, JWT validation, session management, certificate-based authentication, TLS/SSL, code signing, and API security.
• Support identity governance, entitlement management, privileged identity management (PIM), role-based access control (RBAC), just-in-time (JIT) access, passwordless authentication, and secrets management.
• Leverage Microsoft Sentinel, Kusto Query Language (KQL), and audit logs to investigate and troubleshoot complex identity and security issues.
• Provide expertise in Azure and AWS security, Enterprise Privilege Management (EPM), Cloud Infrastructure Entitlement Management (CIEM), and entitlement risk remediation.
• Apply threat modeling methodologies, OWASP standards, application security practices, and secure cloud architecture principles.
• Collaborate with infrastructure and application teams on security solutions involving firewalls, VPNs, DLP, WAFs, application gateways, Azure Application Proxy, DNS, CDN, and network security groups.
• Support container security and orchestration platforms, including Docker and Kubernetes.
• Drive security automation, operational improvements, and identity governance initiatives across hybrid and cloud environments.

Required Skills

• Microsoft Entra ID / Azure AD: Deep expertise in identity architecture, authentication, authorization, Conditional Access, MFA, SSO, and identity federation.
• IAM & Workforce Security: Strong knowledge of identity lifecycle management, identity governance, access policies, RBAC, PIM, and least-privilege access.
• Authentication Protocols: Hands‑on experience with OAuth 2.0, OIDC, SAML, JWT, Kerberos, LDAP, and modern authentication flows.
• Cloud Security: Strong understanding of Azure security, AWS security, cloud-native architectures, and privileged access management.
• Security Monitoring: Experience with Microsoft Sentinel, KQL, audit logs, and identity‑related incident investigation.
• Application & API Security: Experience securing microservices, web applications, mobile applications, APIs, certificates, and session handling.
• Security Architecture: Strong understanding of Zero Trust, threat modeling, OWASP, defense-in-depth, and security best practices.
• Technical Leadership: Proven ability to lead technical teams, define architecture, review security solutions, and advise stakeholders.

Preferred Skills

• Experience with Okta, PingFederate, SailPoint, and other identity governance or entitlement management solutions.
• Knowledge of Entra ID agentic identity, AI security concepts, and AI‑driven identity and access management.
• Experience with CIEM solutions and remediation of excessive permissions, toxic entitlement combinations, and high‑risk access.
• Familiarity with Enterprise Privilege Management (EPM), passwordless authentication, YubiKey, and biometric authentication.
• Knowledge of Microsoft Defender for Cloud, Microsoft Cloud App Security (MCAS), App Proxy, RADIUS, WAF, and network security technologies.
• Experience with Docker security, Kubernetes, cloud cryptography, and cloud-native security services.

Work Authorization

Applicants must be legally authorized to work in the United States.

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.