Solution Architect

Tri-Com Consulting Group; East Hartford (CT); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading consulting firm is seeking a skilled IT professional to manage Azure identity solutions in a hybrid model. The candidate should have deep knowledge in Microsoft Entra ID and experience with API design and governance principles. This is a mid-senior level role on a 2-year contract with potential extensions.

Qualifications

• Deep understanding of Microsoft Entra ID and identity federation principles.
• Experience with Microsoft Graph API and secure API design.
• Familiarity with building custom claims providers.
• Knowledge of OAuth 2.0 and token customization.
• Excellent documentation skills.

Responsibilities

• Design and deploy Azure Functions for identity management.
• Implement Microsoft Entra External ID for integrations.
• Develop workflows for access provisioning and revocation.
• Document identity workflows and governance processes.

Skills

Microsoft Entra ID / Azure AD

Microsoft Graph API

Claims-based authentication

Identity governance concepts

OAuth 2.0

Secure development practices

Excellent communication

Tools

Visio

Azure Key Vault

API Management

Job description

Location: Hybrid (3 days onsite/2 days remote)

Anticipated Duration: 2-year contract (extensions possible)

Scope of Services

• Design and deploy Azure Functions to handle identity events (such as user creation, modification, or access requests) in an event-driven architecture.
• Implement and manage Microsoft Entra External ID Custom Authentication Extensions to integrate with custom APIs, approval workflows, and lifecycle events for B2B and B2C users.
• Build and maintain Custom Claims Providers to enrich tokens with claims sourced from external systems or logic (e.g., department, employment status, role validation).
• Develop workflows that provision access based on defined criteria and automatically revoke access when those criteria change—such as department, division, or job title changes—by integrating with internal data sources and identity signals.
• Integrate custom identity flows with external systems (e.g., SQL databases, REST APIs, HR systems) to support access validation, entitlement management, and sponsor-based models.
• Ensure robust error handling, logging, and monitoring within Azure Functions and all identity-related components.
• Collaborate with external stakeholders to interpret legal and governance requirements and translate them into enforceable technical solutions.
• Document solution architecture and identity workflows using Visio or similar tools and actively contribute to improving identity governance processes.

Minimum Qualifications

• Deep understanding of Microsoft Entra ID / Azure AD, External ID (B2B/B2C), and identity federation principles.
• Experience with Microsoft Graph API, RESTful services, and secure API design.
• Familiarity with claims-based authentication and building custom claims providers.
• Solid understanding of identity governance concepts including access reviews, entitlement management, and sponsor-based models.
• Knowledge of OAuth 2.0, OpenID Connect, and token customization.
• Experience in secure development practices and compliance-driven environments (e.g., CJIS, NIST).
• Excellent communication and documentation skills.

Preferred Qualifications

• Experience integrating identity solutions with external entities (e.g., government agencies or law enforcement).
• Knowledge of Azure services like Key Vault, and API Management.
• Familiarity with CI/CD pipelines and infrastructure as code.
• Relevant Microsoft Certifications, such as:
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology

Industries

• IT Services and IT Consulting

Note: This description retains the core responsibilities and qualifications while removing unrelated postings and extraneous content from the original text.