Microsoft Entra ID Architect

Programmers.io; New York (NY); On-site; USD 170,000 - 190,000; Full time

Job summary

Programmers.io in New York is seeking a Microsoft Entra ID Architect to lead the design, governance, and security architecture of a large-scale identity platform. You will shape identity strategy as part of a Zero Trust initiative and advise security and infrastructure leadership.

The role emphasizes designing tenant-level identity architecture, Conditional Access, privileged access controls, and risk-based design decisions for executive stakeholders. Strong communication is essential.

Qualifications

• 7–10 years of progressive experience in IAM with cloud focus.
• Deep hands-on with Microsoft Entra ID, tenant design and security controls.
• Proven experience designing Conditional Access at scale (risk-based access, session controls).
• Strong understanding of identity attack vectors and threat models.
• Experience in regulated, audit-driven environments with strong control documentation.
• Ability to communicate complex security concepts to senior executives.
• Extensive scripting against Microsoft Graph API for automation.

Responsibilities

• Lead architect for Microsoft Entra ID, aligning with Zero Trust and enterprise security.
• Design and govern Conditional Access policies across workforce, partner, and privileged identities.
• Define privileged access models using least privilege and just-in-time principles.
• Advise Security and Infrastructure teams translating identity risk into architectural decisions.
• Collaborate with IAM, cloud security, endpoint, and application teams to enforce policies.
• Evaluate emerging identity threats and evolve controls accordingly.
• Review complex identity designs, exceptions, and risk acceptances.

Skills

IAM

Entra ID

Conditional Access

Zero Trust

Executive communication

Graph API scripting

Tools

Microsoft Graph API

Job description

Experience: 7 10 years

Audience: Senior consultants, principal architects, identity security leaders

Role OverviewWe are seeking a Microsoft Entra ID Architect to lead the design, governance, and security architecture of a large scale identity platform. This role is suited for a seasoned consultant who has moved beyond implementation and now operates as a trusted advisor to security and infrastructure leadership , shaping identity strategy as a core component of Zero Trust.The successful candidate will define tenant level identity architecture , with particular emphasis on Conditional Access policy design, privileged access controls, and attack path reduction . This role requires both deep technical authority and the ability to articulate risk based design decisions to executive stakeholders.

Key Responsibilities

• Serve as the lead architect for Microsoft Entra ID , defining long term identity and access strategies aligned to Zero Trust and enterprise security objectives.
• Design and govern Conditional Access frameworks that balance security, usability, and operational scalability across workforce, partner, and privileged identities.
• Define security guardrails and architectural standardsArchitect privileged access models using least privilege and just in time principles, including role design, separation of duties, and blast radius reduction.
• Act as a advisor to Security, and Infrastructure translating identity risk into actionable architectural decisions.
• Partner with IAM, cloud security, endpoint, and application teams to ensure consistent policy enforcement across the enterprise.
• Evaluate emerging identity threats and platform capabilities, evolving Conditional Access and identity controls accordingly.
• Review and approve complex identity designs, exceptions, and risk acceptances.

Required Experience & Expertise

• 7 10 years of progressive experience in Identity & Access Management, with significant focus on cloud identity platforms.
• Deep, hands on expertise with Microsoft Entra ID, including tenant architecture and advanced security controls.
• Proven experience designing Conditional Access policies at scale, including risk based access, session controls, and authentication strength enforcement.
• Strong understanding of identity attack vectors, token theft, privilege escalation, and identity centric threat models.
• Experience operating in regulated, audit driven environments with high expectations for control design and documentation.
• Ability to communicate complex security concepts clearly to senior IT, security, and risk executives.
• Extensive experience scripting against Microsoft Graph API for automation, reporting, and advanced identity management tasks.

Preferred Qualifications

• Experience in consulting or advisory roles supporting large enterprises.
• Background in Zero Trust architecture or identity security strategy.
• Industry certifications in security, identity, or cloud architecture (preferred, not required).
• Experience working in large enterprise environment.