IAM Architect: Entra ID & RBAC Authority

Conexess Group; Farmington Hills (MI); On-site; USD 130,000 - 170,000; Full time

Job summary

Conexess Group seeks an Identity and Access Management (IAM) Architect to own and mature RBAC across Entra ID, Active Directory, and external identity platforms. You will guide infrastructure, IT, and development teams as a trusted technical advisor.

The ideal candidate has deep Entra ID experience, lifecycle automation, and governance in regulated environments, with strong ability to translate risk into secure design decisions and compliant documentation.

Qualifications

• 5+ years of hands‑on IAM engineering experience, with at least 3 years focused on Entra ID (Azure AD) in enterprise environments.
• Deep knowledge of Active Directory, including group policy, OU design, domain trust models, and hybrid identity patterns.
• Experience designing and implementing RBAC models at scale in complex or legacy environments.
• Hands‑on experience with Entra ID Governance, including access reviews, entitlement management, lifecycle workflows, and Privileged Identity Management (PIM).
• Strong working knowledge of OAuth 2.0, OIDC, and SAML, sufficient to review developer implementations and identify security risk.
• Practical experience automating identity lifecycle events using Logic Apps, Azure Functions, PowerShell, or the Microsoft Graph API.
• Ability to communicate risk clearly to non‑technical stakeholders and produce compliance‑ready documentation.
• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent professional experience.
• Relevant certifications: SC‑300, AZ‑500 or equivalent are a plus.

Responsibilities

• Design and implement enterprise RBAC across Entra ID, Active Directory, and Entra External ID.
• Lead identity lifecycle automation integrating HR systems with Entra ID to automate provisioning and deprovisioning.
• Govern directory structure and access hygiene across all directory platforms.
• Manage non‑human identities: service accounts, managed identities, and app registrations.
• Advise development teams on token handling, session management, and federation patterns.
• Drive Conditional Access policy design and own Privileged Identity Management configuration.
• Support Entra External ID governance with custom policy, user flows, and external identity federation.
• Produce compliance‑ready IAM documentation and audit inventories.

Skills

IAM engineering

Entra ID (Azure AD)

RBAC design

OAuth 2.0 / OIDC / SAML

Identity lifecycle automation

Education

Bachelor's degree or equivalent

SC‑300 / AZ‑500 certification

Tools

Logic Apps

Azure Functions

PowerShell

Microsoft Graph API

Job description

Conexess Group seeks an Identity and Access Management (IAM) Architect to own and mature RBAC across Entra ID, Active Directory, and external identity platforms. You will guide infrastructure, IT, and development teams as a trusted technical advisor.

The ideal candidate has deep Entra ID experience, lifecycle automation, and governance in regulated environments, with strong ability to translate risk into secure design decisions and compliant documentation.