Identity Architect

Atlas Search; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

Atlas Search seeks an experienced Identity Architect (Domain Lead) to drive enterprise identity integrations tied to mergers and acquisitions. The role focuses on architecture, migration, and cross-tenant efforts, leveraging Microsoft Entra ID, Active Directory, and Microsoft 365.

You will Design migration strategies, implement cross-tenant migrations with secure authentication, and lead a small team of engineers. Expect occasional nights/weekends for cutovers.

Qualifications

• 8+ years in Identity and Access Management (IAM), enterprise identity architecture and migrations.
• Hands-on with Microsoft Entra ID (Azure AD), Active Directory, and Microsoft 365.
• Experience designing and leading cross-tenant identity migrations.
• Strong knowledge of Conditional Access, MFA, SSO, and identity federation.
• Experience with SAML, OAuth, OIDC, SCIM, and claims mapping.
• Scripting/automation skills using PowerShell, Python, and Microsoft Graph.
• Knowledge of DNS, PKI, and enterprise identity security best practices.
• Ability to lead technical teams and manage complex migration projects.

Responsibilities

• Lead end-to-end identity integrations for newly acquired companies, including discovery, architecture, migration planning, and execution.
• Assess existing AD environments, Entra ID tenants, federation configurations, and privileged accounts.
• Design and execute cross-tenant migrations while maintaining uninterrupted authentication and access.
• Develop migration strategies covering SSO, MFA, CA, UPN changes, and domain transitions.
• Migrate enterprise app integrations using SAML, OAuth, OIDC, and SCIM.
• Automate tasks using PowerShell, Python, and Microsoft Graph.
• Collaborate with security, compliance, infra, and apps teams for secure migrations.
• Lead and mentor a small engineering team, providing direction during migrations.
• Create migration documentation, runbooks, rollback procedures, and support cutovers.

Skills

IAM & identity architecture

Cross-tenant migrations

SSO & MFA

Conditional Access

Identity federation

Leadership & mentoring

Scripting & automation

DNS & PKI security

Microsoft Entra ID (Azure AD)

Microsoft 365 administration

Tools

Microsoft Entra ID (Azure AD)

Active Directory

Microsoft 365

SAML

OAuth

OIDC

SCIM

PowerShell

Python

Microsoft Graph

Entra Connect

Job description

Please note: We are unable to accommodate visa sponsorship or visa transfers at this time.

Identity Architect (Domain Lead)

We are partnering with a leading global technology consulting firm seeking an experienced Identity Architect (Domain Lead) to lead enterprise identity integrations associated with mergers and acquisitions.

This is a fully remote opportunity focused on architecture, migration, and integration projects rather than ongoing operational support. The ideal candidate will have extensive experience with Microsoft Entra ID, Active Directory, Microsoft 365, and complex cross-tenant migrations.

Key Responsibilities

• Lead end-to-end identity integrations for newly acquired companies, including discovery, architecture, migration planning, and execution.
• Assess existing Active Directory environments, Entra ID tenants, federation configurations, and privileged accounts.
• Design and execute cross-tenant migrations while maintaining uninterrupted user authentication and application access.
• Develop identity migration strategies covering SSO, MFA, Conditional Access, UPN changes, and domain transitions.
• Migrate enterprise application integrations using SAML, OAuth, OIDC, and SCIM.
• Leverage PowerShell, Python, and Microsoft Graph to automate identity migration and configuration tasks.
• Collaborate with security, compliance, infrastructure, and application teams to ensure secure and successful integrations.
• Lead and mentor a small team of engineers, providing technical direction throughout migration projects.
• Develop migration documentation, implementation plans, rollback procedures, and technical runbooks.
• Support migration cutovers, including occasional nights and weekends.

Required Qualifications

• 8+ years of experience in Identity and Access Management (IAM), including enterprise identity architecture and migration projects.
• Extensive hands-on experience with Microsoft Entra ID (Azure AD), Active Directory, and Microsoft 365.
• Proven experience designing and leading cross-tenant identity migrations.
• Strong knowledge of Conditional Access, MFA, SSO, Entra Connect, and identity federation.
• Experience with SAML, OAuth, OIDC, SCIM, and claims mapping.
• Strong scripting and automation skills using PowerShell, Python, and Microsoft Graph.
• Knowledge of DNS, PKI, and enterprise identity security best practices.
• Demonstrated ability to lead technical teams and manage complex migration projects independently.
• Must meet U.S. person eligibility requirements.
• Flexibility to support night and weekend cutovers as needed.

Preferred Qualifications

• Microsoft SC-300 certification.
• Experience with Quest or similar identity migration tools.
• Exposure to identity services across AWS, GCP, or OCI.
• Experience supporting organizations in construction, energy, utilities, or other distributed industries.