Principal Entra ID Architect

🔥 2 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

⏰ Full Time

🔴 Lead

🏛️ Architect

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Unisys

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1980

💼 Consulting

📦 Logistics

🤖 Artificial Intelligence

💰 Post-IPO Debt on 2020-10

Consulting • Logistics • Artificial Intelligence

Unisys is a global technology solutions company that specializes in providing digital workplace solutions, cloud and applications services, enterprise computing, logistics optimization, and consulting. Leveraging artificial intelligence, Unisys accelerates productivity and drives innovation by offering cutting-edge solutions that enhance the efficiency of businesses and public services. The company collaborates with leading organizations worldwide to create tailored AI models and digital experiences that secure and improve business processes, ultimately realizing the full potential of AI. Unisys also plays a key role in logistics optimization using quantum computing and data analytics to enhance capacity utilization and route planning. Emphasizing cybersecurity and compliance, Unisys ensures a secure business environment for its clients.

📋 Description

• Design, implement, and govern company Microsoft Entra ID tenants • Advance the corporate IT strategy to reduce reliance on Active Directory through secure cloud-based identity capabilities • Provide senior security architecture and strategic guidance for corporate Active Directory environments • Design and govern tenant directory baselines, roles, permissions, consent management, and least-privilege models • Develop automated workflows for reviewing and approving sensitive permission requests • Implement tenant disaster-recovery recoverability and application access reviews • Secure application secrets and certificates using corporate PKI and Azure Key Vault • Design and enforce Conditional Access policies based on user, location, device, and risk signals • Conduct threat modeling and risk assessments for authentication and authorization flows • Monitor application and service-principal activity using Microsoft Sentinel, Azure Monitor, and Entra ID audit logs • Define and maintain enterprise identity architecture leveraging Microsoft Entra ID • Lead adoption of OAuth, OIDC, SAML, FIDO2, and passwordless authentication • Implement identity lifecycle automation with Entra ID Governance, PIM, and Access Reviews • Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations • Integrate SaaS and internal applications with Entra ID for SSO and SCIM provisioning • Support MFA, passwordless authentication, and secure sign-in enhancements • Govern Active Directory architecture, security, privileged access, resilience, and operational standards • Partner with Active Directory engineering and operations teams to maintain secure, resilient, recoverable directory services • Architect secure integration between Active Directory and Microsoft Entra ID across hybrid identity services • Assess architectural risks and legacy dependencies and guide remediation and modernization initiatives • Lead structured problem-solving for complex identity and security challenges • Develop target-state architectures and prioritized roadmaps balancing security, availability, supportability, cost, and business requirements • Provide senior architectural guidance and escalation support for Active Directory and hybrid identity issues • Align security, engineering, operations, governance, leadership, and business-unit teams • Track and communicate progress, dependencies, risk reduction, and business impact • Monitor identity threats, Microsoft security capabilities, regulatory requirements, and industry practices

🎯 Requirements

• BA/BS degree and 8+ years’ relevant experience OR equivalent combination of education and experience • 5+ years primary focus on Microsoft Azure/Entra ID • Experience serving in an engineering or architectural role with responsibility for Microsoft Entra ID, Active Directory, and hybrid identity environments • Experience implementing conditional access, MFA, identity protection, and PIM • Hands-on experience with Entra Connect, Cloud Sync, federation, SSO, and app integrations • Experience securing application registrations, service principals, and enterprise applications in single/multi-tenant environments • Deep expertise in Microsoft Entra ID, including Conditional Access, Entra Directory Configuration, Roles and Permissions, and Privileged Identity Management (PIM) • Proven expertise in PowerShell, Graph API, and automation, including creating and modifying scripts for configuration settings and access reports • Strong understanding of SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP • Experience with Microsoft Graph API permissions, including Application and Delegated permissions and secure assignment methods • Eligibility for any required U.S. Government authorizations for access to export-controlled commodities and technology • 10 or more years of related experience preferred • Master’s degree preferred