Microsoft Entra ID Architect (Azure Active Directory) - 100% remote

Job Title: Microsoft Entra ID Architect (Azure Active Directory)

Primary skills: Windows AD, MFA,SSO,OKTA, Microsoft Azure, PowerShell, Microsoft Entra ID using SAML, OAuth, and OpenID Connect protocols.

Location: US ( Hybrid or Remote)

Experience: 8+ years

About the job Job Summary:

We are seeking a highly skilled Microsoft Active Directory (AD) SME with extensive experience in Okta to Microsoft Entra ID migration to lead a critical migration project. The ideal candidate will be responsible for planning, executing, and managing the migration of 40+ applications from diverse Single Sign-On (SSO) platforms to Microsoft Entra ID. The role also involves SSL migration, configuration of SAML/OAuth protocols, and ensuring seamless authentication and authorization for all integrated applications.

Job Responsibilities: Must Have:

Over 6 years of experience in Identity and Access Management (IAM), specializing in Active Directory (AD) and Microsoft Entra ID.

Expertise in designing and implementing enterprise-level Active Directory environments, including forest/domain design, GPOs, OU structure, and DNS architecture.

Develop and execute AD migration strategies, including target state planning with AD, Microsoft Entra ID, or hybrid models.

Lead migration projects from legacy directory services to modern AD environments, ensuring minimal business disruption.

Drive and enforce security best practices within AD, focusing on RBAC, authentication mechanisms, and group memberships.

Integrate Active Directory with identity management systems, cloud platforms, and third-party applications.

Proven expertise in IAM solutions, including OKTA and Entra/Azure, with a focus on identity governance, authentication, authorization, and federation.

Extensive experience with MFA, SSO, PAM, and hybrid identity solutions.

Lead the migration of applications from Okta to Microsoft Entra ID, including pre-migration assessments and dependency analysis.

Integrate 40+ applications with Microsoft Entra ID using SAML, OAuth, and OpenID Connect protocols.

Demonstrate expertise in configuring and managing B2C (Business-to-Consumer) and B2B (Business-to-Business) user authentication, single sign-on (SSO), and secure access controls.

Migrate and configure SSL certificates for seamless application transitions during migration.

Ensure SSO functionality with Microsoft Entra ID across all applications.

Proficient in AD FS, Azure AD, directory service protocols (LDAP, Kerberos, NTLM, DNS), and domain controller consolidation.

Excellent problem-solving and communication skills, with a proven ability to collaborate with technical and business teams.

Coordinate with application owners to execute migration timelines effectively.