Senior IAM Entra Architect: Hybrid Identity & Zero Trust

Charles Schwab; Southlake (TX); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with company match

Employee stock purchase plan

Paid time off & sabbatical program

Parental leave and family building

Job summary

Charles Schwab invites experienced security professionals to shape our enterprise identity environment. As Senior IAM Entra Architect, you will define target-state architectures, guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services.

You will guide authentication modernization, zero-trust deployments, privileged access, and identity governance while balancing security, regulatory requirements, and operational

Qualifications

• > 10 years in IAM architecture or engineering.
• Deep experience with Entra ID and hybrid identity.
• Experience with Conditional Access, Identity Protection, MFA, passwordless, identity governance, and privileged access.
• Experience designing secure authentication and SSO using OAuth2/OIDC/SAML/WS-Federation.
• Experience securing hybrid identity environments using Entra Connect and federation services.
• Terraform IaC resources, reusable modules, and CI/CD guardrails for identity services.
• Apply Access Control Management, Cybersecurity, Risk Management, and Decision Making skills to identity solutions.
• Strong problem solving, communication, and cross-functional collaboration.
• Strong written and verbal communication; ability to influence stakeholders.
• Preferred certifications: SC-300, SC-100, AZ-305.

Responsibilities

• > Define target-state architectures, guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services.
• Guid e authentication modernization, identity governance, privileged access, and Zero Trust principles.
• Collaborate with Security Engineering, Cloud Platform Engineering, DevSecOps, Infrastructure, and application teams to translate identity challenges into actionable solutions.
• Develop Terraform IaC resources, reusable modules, and automated CI/CD guardrails for identity services.
• Balance security with regulatory requirements, operational resilience, scalability, and user experience.

Skills

IAM architecture

Entra ID design

Hybrid identity

Zero Trust

OAuth/OpenID/SAML

Terraform IaC

CI/CD guardrails

Cross-functional leadership

Security governance

Threat modeling

Tools

Microsoft Entra ID

Active Directory

Terraform

SailPoint

CyberArk

Okta

Federation services

Job description

Charles Schwab invites experienced security professionals to shape our enterprise identity environment. As Senior IAM Entra Architect, you will define target-state architectures, guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services.

You will guide authentication modernization, zero-trust deployments, privileged access, and identity governance while balancing security, regulatory requirements, and operational