Senior Entra IAM Architect: Hybrid Identity & Zero-Trust

Spectraforce; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Spectraforce is seeking an Identity Architect to design, implement, and secure enterprise IAM across Entra ID and Active Directory in a hybrid environment. You will drive zero-trust adoption, manage conditional access, and oversee identity governance and provisioning at scale.

You will collaborate with Security, Cloud, and DevSecOps teams to embed identity controls into cloud landing zones and CI/CD pipelines, while mentoring engineers on best practices for identity design and operations.

Qualifications

• 8+ years of experience in Identity & Access Management, architecture or engineering.
• Strong knowledge of SSO protocols: OAuth2, OIDC, SAML, WS-Fed.
• Experience with Entra ID, AD modernization, and hybrid identity.
• Experience building IaC with Terraform and CI/CD pipelines.
• Automation using PowerShell or similar scripting languages.

Responsibilities

• Design end-to-end IAM architectures using Entra ID and AD.
• Develop and implement identity strategies aligned with security and compliance.
• Lead hybrid identity models, governance, and lifecycle automation.
• Architect and optimize Conditional Access, MFA, and passwordless flows.
• Ensure auditability, risk controls, and regulatory compliance.
• Collaborate with security, cloud, and DevSecOps teams to integrate IAM into pipelines.

Skills

Identity & Access Management

SSO protocols (OAuth2, OIDC, SAML, WS‑

Zero Trust architecture

Terraform IaC

PowerShell automation

Tools

Entra ID

Active Directory

Job description

Spectraforce is seeking an Identity Architect to design, implement, and secure enterprise IAM across Entra ID and Active Directory in a hybrid environment. You will drive zero-trust adoption, manage conditional access, and oversee identity governance and provisioning at scale.

You will collaborate with Security, Cloud, and DevSecOps teams to embed identity controls into cloud landing zones and CI/CD pipelines, while mentoring engineers on best practices for identity design and operations.