Security Architect – AD/Entra ID

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Lead evaluation, design, and development of Active Directory and Azure Active Directory technical requirements, solutions, and implementation roadmaps • Develop and enforce IAM policies, standards, and procedures for regulatory compliance and industry best practices • Introduce and implement emerging security technologies and practices for continuous IAM security architecture improvement • Provide global project and operational teams with technical advice, guidance, expertise, and risk analysis • Translate requirements into architectural designs and influence deployment of key infrastructure components • Maintain expertise in Microsoft Entra ID and related core technologies • Analyze Azure Active Directory environments, identify technical and operational challenges, and develop improvement solutions • Maintain and optimize on-premises Active Directory infrastructure, including DNS, GPOs, and domain controllers • Participate in or lead complex or high-severity troubleshooting and incident/problem resolution • Evaluate and resolve technically complex security issues, internal control issues, critical incidents, and crisis-resolution matters • Implement and enforce MFA and security best practices across user accounts and devices • Develop and manage Microsoft Graph API integrations for automation and custom applications across Microsoft 365 services • Create custom scripts to automate administrative tasks and Graph API data retrieval • Write and maintain advanced PowerShell scripts for user and resource provisioning, reporting, and service configurations across Entra ID and Active Directory • Implement and maintain security best practices

🎯 Requirements

• 10+ years of relevant working experience in IT Security and IT Architecture • 7+ years of experience with Active Directory architecture and infrastructure • In-depth understanding of Active Directory Replication, DNS, Site Links, Site Topology, Group Policy, Global Catalogs, and other core infrastructure components • 3+ years of experience with Azure Active Directory architecture and design • 5+ years of experience with Identity and Access Management (IAM) processes and technologies • Proven expertise in designing and implementing IAM solutions in complex environments • Expertise in Azure AD/Entra, including Conditional Access, MFA, security best practices, hybrid environments, GPOs, On-Premises Active Directory Migrations and Azure AD Connect • Experience with Microsoft Graph API for data retrieval and automation across Azure AAD • In-depth knowledge of identity governance, authentication, authorization, federation, MFA, SSO, and PAM • Understanding of federation technologies (WS-Fed, OAuth, SAML, etc.) • Enterprise/Domain Admin and/or Azure Global Admin responsibilities • Proven knowledge in managing Active Directory 2016/2019/2022 infrastructure for the Enterprise • Strong experience in PowerShell and Microsoft Graph API is required • Knowledge of Microsoft Security Stack, including Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention, and Compliance Center experience including Litigation Hold, Retention, and eDiscovery • Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels • Embraces emerging technologies, including AI tools • Up to 10% travel • Sedentary work • Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day • Close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day • Certifications such as CISSP, CISM, or Microsoft Certified: Identity and Access Administrator Associate are considered an asset

🏖️ Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) • Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans) • HSA contribution: $850 per employee annually / $1750 per family annually • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Collaboration, mentorship, and guidance from knowledgeable colleagues