Senior Entra ID Architect & Zero-Trust Security Leader

Unisys; Whitpain Township (PA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Unisys is seeking a Senior Security Architect to lead the design and governance of Microsoft Entra ID and hybrid identity across the enterprise. You will reduce Active Directory reliance while maintaining secure, resilient, and compliant identity services aligned with Zero Trust.

You will drive architecture, implement modern authentication (OAuth, OIDC, SAML, passwordless), manage CA governance, and partner with AD teams to secure directory services in a cloud-first strategy.

Qualifications

• BA/BS degree and 8+ years’ relevant experience or equivalent combination of education and experience
• 5+ years primary focus on Microsoft Azure/Entra ID
• Experience implementing conditional access, MFA, identity protection, and PIM.
• Hands-on with Entra Connect, Cloud Sync, federation, SSO, and app integrations.
• Proven experience securing application registrations, service principals, and enterprise applications in single/multi-tenant environments.
• Deep expertise in Microsoft Entra ID, including Conditional Access, Entra Directory Configuration, Roles and Permissions, Privileged Identity Management (PIM).
• Proven expertise in PowerShell, Graph API, Automation and ability to create and modify scripts for purposes of configuration settings and report access.
• Strong understanding of modern authentication protocols: SAML, OAuth 2.0, OpenID Connect, Kerberos and LDAP.
• Experience with Microsoft Graph API permissions (Application and Delegated) with deep understanding of how they apply and most secure methods for assignment.

Responsibilities

• Design architect and SME for Entra ID tenant configurations.
• Govern roles, permissions and consent management, enforcing least privilege through robust delegated and application permission models.
• Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests.
• Implement Tenant DR recoverability using best cost-effective means
• Implement application access reviews to validate permissions and ensure least privileged access.
• Design and drive optimal security and cost
• Securely manage application secrets and certificates, integrating with corporate PKI infrastructure and Azure Key Vaults.
• Design and enforce Conditional Access policies based on user, location, device, and risk signals in coordination with security team.
• Conduct threat modeling and risk assessments for authentication and authorization flows.
• Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor, and Entra ID audit logs.
• Define and maintain the enterprise identity architecture leveraging Microsoft Entra ID.
• Lead the adoption of modern authentication (OAuth, OIDC, SAML, FIDO2, passwordless).
• Implement identity lifecycle automation using tools such as Entra ID Governance (IGA), Privileged Identity Management (PIM), and Access Reviews.
• Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations.
• Integrate third-party SaaS and internal applications with Entra ID for SSO and provisioning (SCIM).
• Support the rollout of MFA, passwordless authentication, and secure sign-in enhancements.

Skills

Entra ID expertise

Active Directory

Hybrid identity

Education

BA/BS degree

Master's degree preferred

Tools

Entra Connect

Cloud Sync

Federation

SSO

Graph API

PowerShell

Automation

Job description

Unisys is seeking a Senior Security Architect to lead the design and governance of Microsoft Entra ID and hybrid identity across the enterprise. You will reduce Active Directory reliance while maintaining secure, resilient, and compliant identity services aligned with Zero Trust.

You will drive architecture, implement modern authentication (OAuth, OIDC, SAML, passwordless), manage CA governance, and partner with AD teams to secure directory services in a cloud-first strategy.