Identity Architect

Univedge Consulting LLC; Novi (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Univedge Consulting LLC seeks an Identity Architect to lead discovery and define current and target-state identity architectures, focusing on Okta and Microsoft Entra ID, federation, and access governance. You will guide migration design and establish authentication and coexistence strategies.

The role involves architecture reviews, stakeholder engagement, and ensuring operational readiness for planned cutovers, migrations, and governance-led transitions across complex environments.

Qualifications

• Experience leading identity architecture initiatives and guiding migrations.
• Strong knowledge of Microsoft Entra ID and Okta in enterprise environments.
• Ability to engage senior stakeholders and document architectural decisions.

Responsibilities

• Lead current-state assessment and target-state Microsoft Entra ID architecture.
• Define coexistence, federation, authentication, Conditional Access, lifecycle, governance, and recovery patterns.
• Own architecture decisions, standards, exceptions and technical design reviews.

Skills

Microsoft Entra ID

Active Directory

Hybrid identity

Okta

Federation

SAML

OIDC/OAuth

SCIM

Conditional Access

MFA

PIM

Identity governance

Architecture docs

Senior stakeholder engagement

Current-state architecture

Future-state architecture

Authentication strategy

Migration patterns

Education

Bachelor's degree

Tools

Microsoft Entra ID tooling

Okta tooling

Enterprise IAM tools

Job description

Key: This will be a key customer-facing position responsible for leading discovery, understanding business and technical requirements, defining the current and target-state identity architecture, establishing coexistence and authentication strategies, and guiding the overall migration design and approach. candidates with strong Okta, Microsoft Entra ID, enterprise IAM architecture, federation, Conditional Access, PIM, identity governance, and customer-facing architecture experience.

Role Purpose

The Identity Architect will support the Lineage Okta to Microsoft Entra ID transformation as part of the Program, Architecture & Governance workstream. The role will contribute to a controlled, governance-led migration that protects business continuity, validates rollback readiness, and prepares the future-state environment for operational ownership.

Key Responsibilities

• Lead current-state assessment and target-state Microsoft Entra ID architecture.
• Define coexistence, federation, authentication, Conditional Access, lifecycle, governance, privileged access and recovery patterns.
• Own architecture decisions, standards, exceptions and technical design authority reviews.
• Validate solution alignment with licensing, security, business continuity and operational requirements.
• Guide pilot and migration teams and approve reusable integration patterns.

Required Experience and Skills

• Microsoft Entra ID, Active Directory and hybrid identity
• Okta, federation, SAML, OIDC/OAuth and SCIM
• Conditional Access, MFA, PIM and identity governance
• Architecture documentation and senior stakeholder engagement
• Current and future-state architecture
• Authentication and coexistence strategy
• Approved migration patterns and exception designs

Success Measures

• Assigned deliverables are completed to agreed quality and governance standards.
• Risks, dependencies, defects and decisions are identified early and managed transparently.
• Testing, evidence, rollback and operational-readiness requirements are completed before production progression.
• Knowledge is transferred through clear documentation, walkthroughs and support enablement.

Preferred Profile

Bachelor’s degree or equivalent practical experience in information technology, engineering, cybersecurity, program delivery or a related discipline. Relevant Microsoft, Okta, IT service management, security, change management or project management certifications are advantageous based on the role.

Working Model

The role requires close collaboration across Brillio and client teams, including program management, identity engineering, cybersecurity, infrastructure, HR systems, application owners, Service Desk, operations and third-party vendors. Participation in planned cutovers, readiness reviews and hypercare coverage may be required based on the assigned workstream.