Azure Architect

Job highlights

• 12+ years enterprise IAM architecture, 8+ years Azure architecture, expertise in Microsoft Entra ID and MIM modernization, Azure Functions, Logic Apps, PowerShell, Microsoft Certified Azure Solutions Architect Expert preferred
• Lead design and governance of Azure identity architectures, migrate MIM to cloud-native Entra ID platform, implement RBAC and lifecycle management, integrate enterprise HR and SIS systems, enforce security and compliance policies

Interested candidates, kindly share your resume at 9361912009/[email protected]

Azure Architect JD

Position Summary

The client seeks a highly experienced Senior Azure Identity & MIM Modernization Architect to provide technical leadership for Loyola Marymount University’s (LMU) Identity Modernization Program. The architect will lead the design, governance, and implementation oversight of client transition from Microsoft Identity Manager (MIM) to a modern cloud-based identity platform built on Microsoft Entra ID and Azure services.

This individual will serve as the primary technical authority for identity architecture, Azure platform services, lifecycle management, security, automation, and enterprise integrations across Workday, Banner, Active Directory, Exchange Online, AD LDS, Lenel, and Genetec.

Key Responsibilities

Azure Architecture Leadership

• Design and govern enterprise-scale Azure identity and integration architectures.
• Lead adoption of Microsoft Entra ID, Identity Governance, Conditional Access, and Zero Trust principles.
• Architect Azure-native solutions leveraging:
• Azure Functions
• Azure Logic Apps
• Azure Automation
• Azure Data Factory
• Azure SQL Database
• Azure Storage
• Azure Key Vault
• Azure Monitor
• Azure Application Insights
• Microsoft Sentinel
• Define high-availability, disaster recovery, monitoring, and operational support models.

MIM Assessment & Modernization

• Conduct detailed analysis of the current MIM environment, including:
• Synchronization Rules
• Metaverse Design
• Management Agents
• MPRs and Workflows
• Custom Extensions
• Provisioning Logic
• Develop a migration and decommissioning strategy for MIM.
• Design cloud-native alternatives using Entra ID, Azure Automation, Logic Apps, and API-driven integrations.

Identity & Access Management

• Design lifecycle management processes for:
• Students
• Faculty
• Staff
• Contractors
• Alumni
• Implement RBAC and least-privilege access models.
• Design automated provisioning and deprovisioning workflows.
• Support identity governance, attestation, and access certification processes.

Enterprise Integration Architecture

• Lead architecture and integration strategy for:
• Workday
• Banner SIS
• AD LDS
• Lenel
• Genetec
• Design event-driven and API-based provisioning architectures.
• Define data transformation and orchestration strategies.

Security & Compliance

• Implement and oversee:
• Conditional Access Policies
• Multi-Factor Authentication
• Privileged Identity Management (PIM)
• Identity Governance
• Access Reviews
• Entitlement Management
• Support FERPA, cybersecurity, and audit compliance requirements.
• Design logging, auditing, monitoring, and incident response integrations.

Required Qualifications

Experience

• 12+ years of enterprise IAM architecture experience.
• 8+ years of Microsoft Azure architecture experience.
• 5+ years of Microsoft Entra ID and Identity Governance experience.
• Hands-on experience leading at least two large-scale MIM/FIM modernization or replacement projects.
• Experience architecting cloud-native identity solutions in Azure.
• Experience integrating Azure services with enterprise HR, ERP, and Student Information Systems.

Technical Expertise

Strong hands-on experience with:

Microsoft Identity Platform

• Microsoft Entra ID
• Entra Connect
• Entra Cloud Sync
• Entra ID Governance
• Entra Provisioning Services
• Conditional Access
• Privileged Identity Management (PIM)

Azure Platform

• Azure Functions
• Azure Logic Apps
• Azure Automation
• Azure Data Factory
• Azure API Management
• Azure SQL Database
• Azure Storage Accounts
• Azure Key Vault
• Azure Monitor
• Application Insights
• Microsoft Sentinel

Directory Services

• Active Directory
• AD LDS
• Group Policy
• Hybrid Identity Architectures
• Exchange Online

Development & Automation

• PowerShell
• Microsoft Gr…