Technical Architect (Identity & Entra ID)

Instant Alliance, LLC; Chicago (IL); Remote; USD 117,000 - 138,000; Full time

Job summary

Instant Alliance, LLC is seeking a Junior Technical Architect with a strong foundation in Identity and Access Management (IAM) and specialized expertise in Microsoft Entra ID.

As part of our security and architecture team, you will help accelerate our identity onboarding efforts, streamline cloud directory services, and design scalable, secure access frameworks across our hybrid and multi-tenant ecosystems.

Qualifications

• 2–5+ years of experience in IT infrastructure, security, or systems administration with a focus on IAM.
• Deep, hands-on knowledge of Microsoft Entra ID (formerly Azure AD), including tenant management, enterprise app registrations, custom roles, and security baselines.
• Hybrid identity experience, linking on-premises Active Directory with cloud directories.
• Architectural mindset: translate business needs into secure, scalable technical architectures.
• Proficiency in PowerShell and familiarity with automation or API interactions (Microsoft Graph).
• Strong understanding of authentication protocols (SAML, OAuth, OIDC, Kerberos) and zero-trust concepts.

Responsibilities

• Identity Architecture & Design: Design, implement, and optimize Microsoft Entra ID frameworks, enterprise app integrations, and hybrid identity configurations.
• Access Governance & Security: Architect and refine Conditional Access Policies, Privileged Identity Management (PIM), Identity Protection, and automated lifecycle management workflows.
• Hybrid Integration: Oversee and troubleshoot directory synchronization between on-premises AD DS and the cloud via Microsoft Entra Connect / Cloud Sync.
• Collaboration & Guidance: Partner with engineering and security teams to ensure smooth application onboarding (SAML, OIDC, OAuth) and establish identity best practices.
• Automation & Scripting: Utilize PowerShell and the Microsoft Graph API to automate identity provisioning, reporting, and administrative tasks.
• Continuous Improvement: Research emerging identity trends, modern authentication standards (passwordless, FIDO2), and zero-trust architecture principles.

Skills

IAM

Architectural thinking

PowerShell

Microsoft Entra ID

Tools

Microsoft Graph API

Job description

Location: Remote
Contract Rate: $90/hr+

Department: Information Security / Enterprise Architecture

Position Summary

We are seeking a Junior Technical Architect with a strong foundation in Identity and Access Management (IAM) and specialized expertise in Microsoft Entra ID. As part of our security and architecture team, you will help accelerate our identity onboarding efforts, streamline cloud directory services, and design scalable, secure access frameworks across our hybrid and multi-tenant ecosystems.

While our team is already well-versed in day-to-day Entra operations, we need a forward-thinking technical architect who can look at the big picture, design robust identity patterns, and guide our access governance strategy.

Key Responsibilities

• Identity Architecture & Design: Design, implement, and optimize Microsoft Entra ID frameworks, enterprise application integrations, and hybrid identity configurations.

• Access Governance & Security: Architect and refine Conditional Access Policies, Privileged Identity Management (PIM), Identity Protection, and automated lifecycle management workflows.

• Hybrid Integration: Oversee and troubleshoot directory synchronization between on-premises Active Directory (AD DS) and the cloud via Microsoft Entra Connect / Cloud Sync.

• Collaboration & Guidance: Partner with engineering and security teams to ensure smooth application onboarding (SAML, OIDC, OAuth) and establish identity best practices.

• Automation & Scripting: Utilize PowerShell and the Microsoft Graph API to automate identity provisioning, reporting, and administrative tasks.

• Continuous Improvement: Research emerging identity trends, modern authentication standards (passwordless, FIDO2), and zero-trust architecture principles to future-proof our environment.

Qualifications & Requirements

• Experience: 2–5+ years of experience in IT infrastructure, security, or systems administration, with a demonstrated focus on Identity and Access Management (IAM).

• Entra ID Expertise: Deep, hands-on knowledge of Microsoft Entra ID (formerly Azure AD), including tenant management, enterprise app registrations, custom roles, and security baselines.

• Hybrid Identity: Strong understanding of hybrid environments, linking on-premises Active Directory with cloud directories.

• Architectural Mindset: Ability to translate business requirements into secure, scalable technical architectures rather than just performing day-to-day configurations.

• Scripting Skills: Proficiency in PowerShell and familiarity with automation or API interactions (Microsoft Graph).

• Security Fundamentals: Solid grasp of core security controls, authentication protocols (SAML, OAuth, OIDC, Kerberos), and zero-trust frameworks.

• Preferred Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Solutions Architect Expert, or equivalent security/architecture credentials.

Position Summary

We are seeking a Junior Technical Architect with a strong foundation in Identity and Access Management (IAM) and specialized expertise in Microsoft Entra ID. As part of our security and architecture team, you will help accelerate our identity onboarding efforts, streamline cloud directory services, and design scalable, secure access frameworks across our hybrid and multi-tenant ecosystems.

While our team is already well-versed in day-to-day Entra operations, we need a forward-thinking technical architect who can look at the big picture, design robust identity patterns, and guide our access governance strategy.

Key Responsibilities

• Identity Architecture & Design: Design, implement, and optimize Microsoft Entra ID frameworks, enterprise application integrations, and hybrid identity configurations.

• Access Governance & Security: Architect and refine Conditional Access Policies, Privileged Identity Management (PIM), Identity Protection, and automated lifecycle management workflows.

• Hybrid Integration: Oversee and troubleshoot directory synchronization between on-premises Active Directory (AD DS) and the cloud via Microsoft Entra Connect / Cloud Sync.

• Collaboration & Guidance: Partner with engineering and security teams to ensure smooth application onboarding (SAML, OIDC, OAuth) and establish identity best practices.

• Automation & Scripting: Utilize PowerShell and the Microsoft Graph API to automate identity provisioning, reporting, and administrative tasks.

• Continuous Improvement: Research emerging identity trends, modern authentication standards (passwordless, FIDO2), and zero-trust architecture principles to future-proof our environment.

Qualifications & Requirements

• Experience: 2–5+ years of experience in IT infrastructure, security, or systems administration, with a demonstrated focus on Identity and Access Management (IAM).

• Entra ID Expertise: Deep, hands-on knowledge of Microsoft Entra ID (formerly Azure AD), including tenant management, enterprise app registrations, custom roles, and security baselines.

• Hybrid Identity: Strong understanding of hybrid environments, linking on-premises Active Directory with cloud directories.

• Architectural Mindset: Ability to translate business requirements into secure, scalable technical architectures rather than just performing day-to-day configurations.

• Scripting Skills: Proficiency in PowerShell and familiarity with automation or API interactions (Microsoft Graph).

• Security Fundamentals: Solid grasp of core security controls, authentication protocols (SAML, OAuth, OIDC, Kerberos), and zero-trust frameworks.

• Preferred Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Solutions Architect Expert, or equivalent security/architecture credentials.