Senior Entra ID & Active Directory Architect

Southwest Research Institute; San Antonio (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Southwest Research Institute seeks a senior Identity Engineer to lead multiple identity modernization projects and act as the escalation point for complex authentication issues. You will architect and implement Conditional Access, MFA, SSO, and Zero Trust policies while modernizing legacy components like ADFS and on-prem IAM tooling.

You will collaborate across IT teams to secure hybrid environments, manage AD/Entra ID provisioning, and drive security governance with OAuth, SAML, and OpenID

Qualifications

• Requires a Bachelor's degree in Information Technology or related field with relevant experience; in lieu of a degree, 6 years of professional level experience or related certifications will be considered.
• Relevant Microsoft Certifications are preferred.
• 2+ years: Experience managing enterprise identity platforms in hybrid environments, including CA, MFA, SSO design and support.
• Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads.
• Hands-on experience with ADFS and familiarity with PKI systems, including certificates.

Responsibilities

• Provide expert support for Active Directory and Entra ID by managing accounts, groups, group policies, and directory synchronization across hybrid identity infrastructures.
• Architect, configure, and support Conditional Access, MFA, SSO, and Zero Trust access policies in Entra ID.
• Implement and support secure app integrations using OAuth, SAML, and OpenID Connect, including app/enterprise applications and related access policies.
• Manage and troubleshoot ADFS and legacy identity components to maintain secure access to enterprise and cloud resources.
• Plan migrations away from legacy patterns and serve as senior escalation point for identity-related issues.
• Collaborate across IT teams to resolve complex AD/Entra ID/PKI issues and document governance.

Skills

Conditional Access

MFA

SSO

Zero Trust

OAuth

SAML

OpenID Connect

PIM

PAM

Active Directory

Entra ID / Azure AD

ADFS

PKI

Certificates

Education

Bachelor's degree in Information Technology or related field

Microsoft Certifications (MCSA/MCSE or Azure Administrator Associate) preferred

Tools

Active Directory

Entra ID / Azure AD

ADFS

PKI

Job description

Southwest Research Institute seeks a senior Identity Engineer to lead multiple identity modernization projects and act as the escalation point for complex authentication issues. You will architect and implement Conditional Access, MFA, SSO, and Zero Trust policies while modernizing legacy components like ADFS and on-prem IAM tooling.

You will collaborate across IT teams to secure hybrid environments, manage AD/Entra ID provisioning, and drive security governance with OAuth, SAML, and OpenID