Senior Azure Architect – MIM Modernization & Microsoft Entra ID

Job Title: Senior Azure Architect – MIM Modernization & Microsoft Entra ID Experience: 10+ Years Work Mode: Remote Contract Duration: 6 Months (Extendable) Shift Timing: IST Availability: Immediate Joiners Preferred Project: Enterprise Identity Modernization Job Overview We are looking for a highly experienced Senior Azure Architect specializing in Identity and Access Management (IAM) to lead the modernization of an enterprise identity platform from Microsoft Identity Manager (MIM) to Microsoft Entra ID and Azure-native services. The ideal candidate must have strong hands-on experience in end-to-end identity implementation, large-scale identity migration, MIM scripting, Entra ID automation, PowerShell, and enterprise system integrations. Candidates must be capable of independently designing and implementing complex identity solutions, troubleshooting synchronization issues, and leading architecture decisions. Important: Candidates with only production support or maintenance experience will not be considered. Strong hands-on implementation and migration experience is mandatory. Key Responsibilities 1. Azure Identity Architecture - Design and implement enterprise-scale IAM solutions using Microsoft Entra ID and Azure services. - Lead the transition from MIM to modern cloud-based identity management. - Design hybrid identity architectures integrating on-premises Active Directory with Microsoft Entra ID. - Implement SSO, MFA, Conditional Access, RBAC, and Privileged Identity Management (PIM). - Define identity governance, access reviews, and automated provisioning and deprovisioning processes. 2. MIM Modernization and Migration - Assess existing MIM environments, including synchronization rules, metaverse design, management agents, workflows, provisioning logic, and custom extensions. - Develop and execute migration strategies from MIM to Microsoft Entra ID and Azure-native identity solutions. - Perform MIM scripting, customization, troubleshooting, and synchronization analysis. - Develop automated identity provisioning workflows using PowerShell, Microsoft Graph API, Azure Automation, and Logic Apps. - Troubleshoot synchronization failures, attribute mismatches, certificate issues, URL configuration problems, and identity reconciliation errors. - Handle complex identity scenarios, including multiple roles or identities associated with a single individual. 3. Entra ID Scripting and Automation - Develop and maintain PowerShell scripts for identity lifecycle management, provisioning, synchronization, and access control. - Automate identity administration using Microsoft Graph API and REST APIs. - Implement onboarding, role changes, transfers, and offboarding workflows. - Design automation for identity governance, access reviews, and entitlement management. - Implement error handling, logging, monitoring, and exception management. 4. Enterprise Application Integration - Design and implement identity integrations with enterprise systems, including: - Workday - Banner Student Information System (SIS) - Active Directory and AD LDS - Exchange Online - Lenel and Genetec physical access systems - Implement application onboarding using SAML, OAuth 2.0, and OpenID Connect (OIDC). - Develop API-based integrations for identity synchronization and provisioning. - Support integrations with physical access control systems, biometric authentication, and ID card management. - Troubleshoot integration issues involving attributes, authentication, certificates, endpoints, and synchronization. 5. Security and Compliance - Implement MFA, SSO, Conditional Access, RBAC, PIM, and least-privilege access controls. - Apply Zero Trust security principles and just-in-time (JIT) privileged access practices. - Configure identity governance, entitlement management, access reviews, and audit logging. - Support IP-based access restrictions and IP whitelisting where required. - Integrate logging, monitoring, and security incident processes with Microsoft Sentinel. 6. Azure Platform and Governance - Architect solutions using Azure Functions, Logic Apps, Azure Automation, API Management, Azure SQL Database, Storage Accounts, and Key Vault. - Implement monitoring using Azure Monitor and Application Insights. - Define high availability, disaster recovery, and operational support strategies. - Apply Infrastructure as Code (IaC) practices using Bicep, ARM templates, or Terraform. - Support CI/CD pipelines and deployment governance. Mandatory Technical Skills -…