Senior Engineer / Architect - Microsoft Entra Identity & Access Management (IAM) Security

NTT DATA, Inc.; Fort Worth (TX); On-site; USD 150,000 - 175,000; Full time

Job summary

NTT DATA, Inc. in Fort Worth, TX seeks a Senior Architect / Engineer for Microsoft Entra IAM Security to lead enterprise identity security design and implementation. You will drive authentication, authorization, and governance across cloud and on‑prem environments, guiding risk-based access, PIM, and passwordless strategies.

You will mentor teams and partner with security, cloud, and enterprise arch teams. The role emphasizes hands-on engineering leadership, architecture reviews, and automation

Qualifications

• 4+ years with Microsoft Entra ID including CA, PIM and governance.
• 7+ years in Active Directory, Entra Connect/Cloud Sync and Azure RBAC.
• 5+ years with OAuth2.0, OIDC, SAML, SCIM and modern auth.

Responsibilities

• Define enterprise Entra IAM security architecture and guardrails.
• Architect secure identity across cloud, hybrid, multi-cloud and on‑prem.
• Lead identity-centric Zero Trust design with risk-based access.
• Develop CA strategies for users, admins, devices and workloads.
• Implement phishing-resistant and passwordless auth (FIDO2, Windows Hello).
• Govern PIM and just-in-time access to minimize standing privileges.
• Architect workload identities, service principals and API permissions.
• Design OAuth2/OIDC/SAML flows and modern auth patterns.
• Oversee Entra ID governance, entitlements, and access reviews.
• Lead IAM modernization and security-hardening initiatives.

Skills

Microsoft Entra ID

Conditional Access

PIM

Identity Protection

ID Governance

Enterprise Applications

App Registrations

Workload identities

OAuth 2.0

OpenID Connect

SAML 2.0

SCIM

Microsoft Graph

Hybrid identity

Active Directory

Entra Connect/Cloud Sync

Azure RBAC

PowerShell

Automation

Job description

Company Overview

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, NTT DATA's Client is currently seeking a Senior Architect / Engineer - Microsoft Entra Identity & Access Management (IAM) Security to join their team in Fort Worth, Texas.

Job Description

Senior Architect / Engineer - Microsoft Entra Identity & Access Management (IAM) Security

The Senior Architect / Engineer - Microsoft Entra IAM Security is responsible for defining, designing, and engineering enterprise identity security solutions using Microsoft Entra ID and the broader Microsoft identity security ecosystem.

This role provides senior technical leadership for identity architecture, authentication, authorization, privileged access, identity governance, application access, and hybrid/cloud identity security. The architect establishes IAM security patterns and standards while also providing hands-on engineering leadership for complex implementations, migrations, integrations, and security remediation initiatives.

The position serves as a subject-matter expert for identity-centric Zero Trust security, partnering with cybersecurity, cloud, infrastructure, application, risk, compliance, and enterprise architecture teams to reduce identity-related risk and protect access to critical enterprise resources.

Key Responsibilities

• Define enterprise Microsoft Entra IAM security architecture, standards, reference architectures, design patterns, and engineering guardrails.
• Architect secure identity solutions across cloud, hybrid, multi-cloud, SaaS, and on-premises environments.
• Develop and implement an identity-centric Zero Trust architecture, emphasizing continuous verification, least privilege, strong authentication, and risk-based access.
• Design enterprise Conditional Access strategies covering users, administrators, workloads, applications, devices, authentication strength, and risk.
• Architect phishing-resistant and passwordless authentication solutions using FIDO2/passkeys, Windows Hello for Business, certificate-based authentication, and other supported authentication methods.
• Design and govern Privileged Identity Management (PIM) and privileged-access models to minimize standing administrative privileges and enforce just-in-time access.
• Establish security architecture for workload identities, managed identities, service principals, application registrations, API permissions, and secrets/certificate management.
• Architect secure application authentication and authorization using OAuth 2.0, OpenID Connect, SAML 2.0, SCIM, Microsoft Graph, and modern authentication patterns.
• Design Entra ID Governance capabilities, including entitlement management, access reviews, lifecycle workflows, separation of duties, and automated identity lifecycle controls.
• Define security architecture for joiner, mover, and leaver (JML) processes and ensure timely provisioning, modification, and removal of access.
• Design and review hybrid identity security, including Active Directory integration, Entra Connect/Cloud Sync, authentication flows, and protection of privileged identity paths.
• Lead IAM threat modeling and security architecture reviews for new applications, platforms, cloud services, and major technology initiatives.
• Identify identity-related attack paths, excessive privileges, legacy authentication dependencies, insecure application permissions, and other IAM security risks.
• Design controls for detecting and responding to identity compromise, credential theft, token abuse, risky sign-ins, privilege escalation, and unauthorized access.
• Define identity logging, monitoring, and alerting requirements and integrate Entra telemetry with SIEM/SOC and security operations processes.
• Provide architecture and engineering leadership during complex identity security incidents and root cause investigations.
• Develop automation using Microsoft Graph API, PowerShell, REST APIs, and infrastructure-as-code/policy-as-code approaches to improve security consistency and reduce manual administration.
• Lead IAM modernization, tenant consolidation, authentication modernization, application migration, and security-hardening initiatives.
• Evaluate new Microsoft identity capabilities and recommend adoption based on security benefits, operational impact, architectural fit, and organizational risk.
• Mentor IAM engineers and architects and provide technical leadership across IAM/security engineering teams.

Required Technical Skills

• 4 years' experience with with Microsoft Entra ID, including Conditional Access, PIM, Identity Protection, ID Governance, Enterprise Applications, App Registrations, workload identities, authentication methods, Microsoft Graph, and hybrid identity.
• 7 years' experience with Active Directory, Entra Connect/Cloud Sync, Microsoft 365 identity integration, Azure RBAC, and the relationship between cloud and on-premises identity security.
• 5+ years' experience with identity protocols and standards including OAuth 2.0, OpenID Connect, SAML 2.0, SCIM, Kerberos, LDAP, and modern authentication.
• 7 years' experience using PowerShell and Microsoft Graph API, with experience applying automation to identity provisioning, security controls, policy deployment, reporting, and governance.
• 5 + years' experience with identity-related security threats, including credential theft, token theft/replay, MFA bypass techniques, consent phishing, privilege escalation, compromised service principals, excessive application permissions, and lateral movement involving identity systems.

About NTT DATA

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com

Accessibility and Equal Employment Opportunity

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.