Identity Architect – CyberArk & Entra ID

Role Description
We are seeking an experienced senior Identity Architect to lead the design, implementation, security, and operational governance of enterprise identity services, with CyberArk, Entra ID, and Active Directory as the core technologies.
The role combines hands-on identity architecture with technical leadership across cloud and on-premises environments. The successful candidate will drive secure identity architecture, privileged-access controls, identity hardening, and continuous improvement while providing technical direction on enterprise identity security.
Key Responsibilities
Architect, implement, maintain, and continuously improve enterprise Active Directory environments, including multi-domain and multi-forest architectures.
Establish secure Active Directory tiering, delegation, security baselines, and privileged-access models.
Maintain directory health across replication, domain and forest trusts, Sites & Services, domain controllers, and directory recovery capabilities.
Lead Active Directory security hardening, hygiene assessments, attack-surface reduction, schema management, and privileged-access controls.
Direct the architecture, configuration, security, and operational governance of Entra ID.
Design and maintain Entra ID conditional-access and multifactor-authentication strategies aligned with least-privilege principles.
Govern enterprise application onboarding, application registrations, external identities, user and group access, and identity lifecycle controls within Entra ID.
Perform periodic Entra ID architecture and security assessments and recommend improvements based on identified risks and enterprise requirements.
Lead privileged credential and access management through CyberArk, including credential vaulting, rotation, privileged-account onboarding, and break-glass account governance.
Drive CyberArk privileged-access improvements that enforce controlled, time-limited, and least-privilege access patterns.
Support investigation and remediation of identity-security incidents involving CyberArk, Entra ID, and Active Directory.
Provide senior technical leadership and architectural guidance for identity-security initiatives involving CyberArk, Entra ID, and Active Directory.
Collaborate with infrastructure, security, and application teams to deliver integrated and resilient enterprise identity solutions.
Support audit and regulatory activities by providing appropriate identity-security evidence and driving remediation of identified control gaps.
Contribute to executive-level reporting and recommendations concerning enterprise identity-security posture.
Required Skills
Proficient
CyberArk
Entra ID
Active Directory
Experience
8+ years of cybersecurity experience, including 6+ years specifically in identity and access management.
Experience in architecting and operating enterprise Active Directory and hybrid identity environments.
Experince in working with Entra ID and cloud-based identity environments.
Experince in designing and managing privileged-access solutions.
Demonstrated experience operating identity services in complex enterprise environments.
Skills
Active Directory, Entra ID, CyberArk

Work arrangement
No