Onsite IAM Entra Architect: Identity Modernization Lead

Charles Schwab Corporation; Southlake (TX); On-site; USD 170,000 - 210,000; Full time

Job summary

Charles Schwab Corporation is seeking a Senior IAM Entra Architect to shape security and modernization of the enterprise identity environment. You will define target-state architectures and guardrails for Microsoft Entra ID, Active Directory, and hybrid identity, guiding complex decisions on authentication modernization and governance.

You will collaborate across Security Eng, Cloud Platform Eng, DevSecOps, Infrastructure, and apps teams to deliver scalable, secure identity solutions while

Qualifications

• 10+ years of experience in Identity and Access Management architecture or engineering.
• Deep experience designing enterprise identity solutions using Microsoft Entra ID, Active Directory, and hybrid identity technologies.
• Experience with Conditional Access, Identity Protection, multifactor authentication, passwordless authentication, identity governance, and privileged access.
• Experience designing secure authentication and single sign-on solutions using OAuth 2.0, OpenID Connect, SAML, or WS-Federation.
• Experience securing hybrid identity environments using Entra Connect, federation services, lifecycle automation, and cloud-based identity patterns.
• Experience developing Terraform infrastructure-as-code resources, reusable modules, and automated CI/CD guardrails for identity services.
• Ability to apply Access Control Management, Cybersecurity, Risk Management, and Decision Making skills to produce secure, scalable, auditable identity solutions.
• Demonstrated Problem Solving, Communication, and Cross-Functional Collaboration skills when guiding complex architecture and security decisions.

Responsibilities

• Define target-state architectures, security guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services.
• Guide authentication modernization, identity governance, application migration, privileged access, and Zero Trust principles.
• Collaborate with Security Engineering, Cloud Platform Engineering, DevSecOps, Infrastructure, and application teams to deliver scalable identity solutions.
• Balance security, regulatory requirements, operational resilience, and user experience in complex environments.
• Mentor engineers and help establish identity architecture standards and best practices.

Skills

IAM Architecture

Enterprise Entra ID & AD

Conditional Access

OAuth/OpenID Connect/SAML

Hybrid Identity

Terraform IaC

CI/CD Guardrails

Identity Governance

Security Risk Management

Cross-Functional Collaboration

Education

Microsoft SC-300

SC-100

AZ-305

Tools

Terraform

Entra ID

Active Directory

Okta

SailPoint

CyberArk

Job description

Charles Schwab Corporation is seeking a Senior IAM Entra Architect to shape security and modernization of the enterprise identity environment. You will define target-state architectures and guardrails for Microsoft Entra ID, Active Directory, and hybrid identity, guiding complex decisions on authentication modernization and governance.

You will collaborate across Security Eng, Cloud Platform Eng, DevSecOps, Infrastructure, and apps teams to deliver scalable, secure identity solutions while