Principal Microsoft Entra ID Architect

Overview

Principal Microsoft Entra ID Architect who leads the design, implementation and governance of company Entra ID tenants, aligning tenant configuration, security and operations with Zero Trust principles and corporate security policies. This is a hands-on role combining technical depth with delivery focus.

What you'll do

• Design, architect and act as SME for corporate tenant directory baseline configurations and settings.
• Govern roles, permissions and consent management, enforcing least privilege through delegated and application permission models.
• Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests.
• Implement Tenant DR recoverability using the most cost-effective means.
• Implement application access reviews to validate permissions and ensure least-privileged access.
• Design and drive optimal security and cost.
• Securely manage application secrets and certificates, integrating with corporate PKI infrastructure and Azure Key Vaults.
• Design and enforce Conditional Access policies based on user, location, device and risk signals in coordination with the security team.
• Conduct threat modeling and risk assessments for authentication and authorization flows.
• Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor and Entra ID audit logs.
• Define and maintain the enterprise identity architecture leveraging Microsoft Entra ID.
• Lead the adoption of modern authentication (OAuth, OIDC, SAML, FIDO2, passwordless).
• Implement identity lifecycle automation using tools such as Entra ID Governance (IGA), Privileged Identity Management (PIM) and Access Reviews.
• Deploy and manage Entra Connect, Cloud Sync, federation and SSO configurations.
• Integrate third-party SaaS and internal applications with Entra ID for SSO and provisioning (SCIM).
• Support the rollout of MFA, passwordless authentication and secure sign-in enhancements.
• Lead structured problem-solving for complex, high-impact information technology security and identity-related challenges.
• Develop and propose actionable, scalable solutions aligned with enterprise risk appetite and security strategy.
• Drive end-to-end execution of solutions, ensuring delivery, stakeholder alignment and measurable outcomes.
• Influence teams and leadership to adopt new approaches and remediate systemic issues.
• Collaborate with engineering, operations and governance teams to ensure solutions are adopted and maintained.
• Track and report progress on key initiatives, highlighting risk reduction and business impact.
• Stay current on emerging threats, technologies and regulatory requirements to inform strategic decisions.

What you'll need

• BA/BS degree and 8+ years' relevant experience, or an equivalent combination of education and experience.
• 7 or more years of related experience.
• Deep expertise in Microsoft Entra ID, Active Directory and hybrid identity architectures.
• Experience implementing conditional access, MFA, identity protection and PIM.
• Hands-on experience with Entra Connect, Cloud Sync, federation, SSO and app integrations.
• 3+ years primary focus on Microsoft Azure/Entra ID.
• Proven experience securing application registrations, service principals and enterprise applications in single- and multi-tenant environments.
• Deep expertise in Microsoft Entra ID, including Conditional Access, Entra Directory Configuration, Roles and Permissions, and Privileged Identity Management (PIM).
• Proven expertise in PowerShell, Graph API and automation, with the ability to create and modify scripts for configuration settings and access reporting.
• Strong understanding of modern authentication protocols: SAML, OAuth 2.0, OpenID Connect, Kerberos and LDAP.
• Experience with Microsoft Graph API permissions (Application and Delegated), with deep understanding of how they apply and the most secure methods for assignment.

Nice to have

• Master's degree.

Details

• Location: Bangalore, KA, India.