Microsoft Entra ID Architect

KeyData Cyber; United States; Remote; USD 124,000 - 207,000; Full time

Job summary

KeyData Cyber in the United States is seeking a highly skilled Microsoft Entra ID Architect to join our Delivery Services team. You will design, implement, and manage cloud-based and hybrid identity infrastructures, serving as the subject matter expert for our identity ecosystem, ensuring seamless access while maintaining a robust security posture.

This contract role, up to 10 months, focuses on zero-trust enforcement, MFA, Passwordless, PIM, and governance using Entra tools.

Qualifications

• 5 years of IAM experience with at least 3 years focused on Microsoft Entra ID/Azure AD.
• Bachelor's degree in CS/IT or related field.
• Strong scripting using PowerShell and Microsoft Graph API.
• Solid understanding of SAML, OIDC, OAuth, FIDO2.
• Experience with Entra ID Governance tools (PIM, Access Reviews).

Responsibilities

• Design, implement, and manage hybrid Entra ID identities and Entra Connect/Cloud Sync environments.
• Manage AD and Entra ID directory integration.
• Oversee Enterprise Applications, App Registrations, and Service Principals with secure API permissions.
• Troubleshoot authentication, synchronization, and replication issues across hybrid infrastructure.
• Enforce zero-trust policies with Entra Conditional Access, risk-based policies, and CAE.
• Deploy MFA, Passwordless, and Windows Hello for Business.
• Configure Privileged Identity Management (PIM) for JIT/JEA.
• Implement Entra ID Governance: Access Reviews, Access Packages, Lifecycle Workflows.
• Automate identity tasks using PowerShell and Microsoft Graph API.
• Monitor logs with Entra ID Protection and integrate with SIEM.
• Conduct regular access audits for SOC2/ISO 27001 compliance.

Skills

Microsoft Entra ID / Azure AD

IAM

PowerShell scripting

Microsoft Graph API

Zero-trust security

Hybrid identity

Entra governance tools

Education

Bachelor's degree in Computer Science/IT or related field

Tools

Entra Connect / Cloud Sync

Active Directory integration

Job description

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M identities managed, and 1,000 successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)


• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

We are seeking a highly skilled Microsoft Entra ID Architect specializing in Microsoft Entra ID (formerly Azure Active Directory) to join our Delivery Services team. In this role you will design, implement, and manage our cloud-based and hybrid identity infrastructures. You will serve as the subject matter expert for our identity ecosystem, ensuring seamless user access while maintaining a robust security posture. You will be responsible for defining access management strategies, enforcing governance policies, and securing our enterprise resources across hybrid environments.

Location: USA, Remote

Employment Type: Contract Up to 10 months

What You’ll Do

• Design, deploy, and maintain Microsoft Entra ID and hybrid identity architectures, including Entra Connect / Cloud Sync environments.


• Manage corporate directory integration between on-premises Active Directory (AD) and Entra ID.


• Oversee Enterprise Applications, App Registrations, and Service Principals, ensuring secure API permissions and consent frameworks.


• Troubleshoot complex authentication, synchronization, and replication issues across hybrid infrastructure.


• Design and enforce zero-trust security architectures using Entra Conditional Access Policies, risk-based policies, and Continuous Access Evaluation (CAE).


• Deploy and manage Multi-Factor Authentication (MFA), Passwordless authentication, and Windows Hello for Business.


• Configure and maintain Privileged Identity Management (PIM) to enforce just-in-time (JIT) and just-enough-access (JEA) for administrative roles.


• Implement Entra ID Governance, including Access Reviews, Entitlement Management (Access Packages), and Lifecycle Workflows to automate user onboarding/offboarding.


• Automate routine identity management tasks using PowerShell, Microsoft Graph API, and Azure Automation runbooks.


• Monitor identity security logs using Entra ID Protection, Log Analytics, and integrate logs with enterprise SIEM platforms (e.g., Microsoft Sentinel).


• Conduct regular access audits to ensure compliance with corporate policies, regulatory standards (e.g., SOC2, ISO 27001), and identity best practices.

Who We’re Looking For

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent professional experience).


• 5 years of dedicated experience in Identity and Access Management (IAM), with at least 3 years focusing heavily on Microsoft Entra ID / Azure AD.


• Deep understanding of modern authentication protocols (SAML 2.0, OIDC, OAuth 2.0, WS-Fed, FIDO2).


• Hands-on experience configuring Entra ID Governance tools (PIM, Access Reviews).


• Strong proficiency in scripting and automation using PowerShell and interfacing with the Microsoft Graph API.


• Solid understanding of network security concepts relating to identity (e.g., Managed Identities, Application Proxy, Private Access).

Nice-to-Have Skills

• Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Azure Solutions Architect Expert (AZ-305)


• CISSP, CISA, or CCSP designations are highly valued.


• Familiarity with integrating Entra ID with governance platforms (such as SailPoint Identity Security Cloud or IdentityIQ) for advanced identity lifecycle workflows is a strong plus.


• Strong analytical mindset, excellent documentation skills, and the ability to collaborate effectively with security compliance officers and infrastructure teams. #LI-RR1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact *Talent Acquisition*, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third-party service providers as part of our standard application screening process.