Identity Architect

Insight Global; Addison (TX); On-site; USD 140,000 - 200,000; Full time

Job summary

Insight Global seeks a Senior Identity Architect to lead end-to-end identity workstreams during acquisitions, including discovery, target-state design, and migrations across multiple environments.

The role requires hands-on scripting with PowerShell and Python, deep Entra ID expertise, and collaboration with security/compliance teams to ensure SOX-aligned access controls while coordinating with engineers and IT teams from acquired companies.

Qualifications

• 8+ years of Identity and Access Management experience.
• Proven architecture/design ownership for cross-tenant identity migrations.
• Deep Microsoft Entra ID experience, including Conditional Access, SSO, MFA, and Entra Connect.
• Deep Active Directory expertise.
• Strong SAML, OIDC, OAuth, SCIM, and claims-mapping experience.
• Hands-on PowerShell.
• Python and Microsoft Graph experience.
• Strong DNS and PKI knowledge.

Responsibilities

• Own the identity workstream end to end across M&A integrations, from discovery and architecture through migration and final cutover.
• Assess acquired-company environments including Active Directory forests/domains, Entra ID tenants, federation, privileged accounts, SSO applications, and non-human identities.
• Design target-state identity architecture aligned with the parent organization’s Entra ID/M365 standards.
• Develop cross-tenant coexistence and migration strategies, including UPN and domain moves.
• Assess dependencies involving SSO applications, devices, service accounts, and service principals.
• Re-point and migrate applications using SAML, OIDC, OAuth and SCIM.
• Build migration sequencing, rollback procedures, and go/no-go criteria.
• Partner with security and compliance teams to implement appropriate access controls, including SOX requirements.
• Lead cutover execution and ultimately retire/decommission source identity environments.
• Direct 2-3 engineers and coordinate with program architects, security, compliance, application owners, and acquired-company IT teams

Skills

IAM architecture

Cross-tenant migrations

Active Directory

Entra ID/Azure

SAML/OIDC/OAuth

PowerShell

Python

Microsoft Graph

SC-300 certification

Security/compliance

Education

SC-300 certification

Tools

PowerShell

Python

Microsoft Graph

Job description

Job Description

Senior hands-on Identity Architect responsible for leading identity integration during acquisitions. This person will own the identity domain from discovery and target-state architecture through cross-tenant coexistence, scripting, migration, and final cutover while leading a small engineering team.

• Own the identity workstream end to end across M&A integrations, from discovery and architecture through migration and final cutover.
• Assess acquired-company environments including Active Directory forests/domains, Entra ID tenants, federation, privileged accounts, SSO applications, and non-human identities.
• Design target-state identity architecture aligned with the parent organization’s Entra ID/M365 standards.
• Develop cross-tenant coexistence and migration strategies, including UPN and domain moves.
• Assess dependencies involving SSO applications, devices, service accounts, and service principals.
• Re-point and migrate applications using SAML, OIDC, OAuth and SCIM.
• Build migration sequencing, rollback procedures, and go/no-go criteria.
• Partner with security and compliance teams to implement appropriate access controls, including SOX requirements.
• Perform hands-on PowerShell, Python, and Microsoft Graph automation.
• Lead cutover execution and ultimately retire/decommission source identity environments.
• Direct 2-3 engineers and coordinate with program architects, security, compliance, application owners, and acquired-company IT teams

Skills and Requirements

• 8+ years of Identity and Access Management experience.
• Proven architecture/design ownership for cross-tenant identity migrations.
• Deep Microsoft Entra ID experience, including Conditional Access, SSO, MFA, and Entra Connect.
• Deep Active Directory expertise.
• Strong SAML, OIDC, OAuth, SCIM, and claims-mapping experience.
• Hands-on PowerShell.
• Python and Microsoft Graph experience.
• Strong DNS and PKI knowledge.
• Ability to own discovery, architecture, planning, risk, migration, and cutover execution rather than functioning solely as a high-level architect.
• Ability to lead engineers while remaining hands-on.
• Previous M&A integration experience.
• SC-300 certification.
• Quest or comparable identity/migration tooling.
• AWS, GCP, or OCI identity experience.
• Experience supporting construction, energy, utilities, or another field-heavy organization.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].