> Markdown version of [/jobs/ext/2385684-identity-access-mgmt-it-advisor](https://www.wearedevelopers.com/jobs/ext/2385684-identity-access-mgmt-it-advisor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Access Mgmt IT Advisor - **Company:** Occidental Chemical Corporation - **Location:** Houston, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Amazon Web Services, Microsoft Azure, Cyber Security, Information Systems, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Kerberos (Protocol), Windows PowerShell, Azure Active Directory, Google Cloud, Cyberark, Microsoft InTune, Information Technology, SailPoint - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=54c7c14ae6bf57bc ## About the Role * Technical Expertise: Deep knowledge of Active Directory architecture, including DNS integration, replication, GPOs, and AD hardening best practices. * Strong experience with IAM platforms (SailPoint, CyberArk, Azure Entra ID, Intune). * Familiarity with cybersecurity principles and frameworks (NIST, ISO 27001). * Risk & Compliance: Ability to ensure adherence to regulatory requirements and internal policies. * Analytical & Problem-Solving: Skilled in identifying risks and implementing effective mitigation strategies. * Soft Skills: Excellent communication and collaboration skills for cross-functional engagement. * High ethical standards and attention to detail., * Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field will consider relevant experience in lieu of education. * 7+ years of experience in Active Directory architecture, identity and access management, or cybersecurity leadership. * Preferred certifications: CISSP, CISA, Microsoft Certified: Identity and Access Administrator Associate. * Vendor certifications from AWS, Microsoft Azure, or Google Cloud Platform preferred. Preferred Attributes: * Experience with hybrid identity solutions (on-prem AD + Azure AD). * Knowledge of automation tools for AD and IAM processes (PowerShell scripting). * Familiarity with cybersecurity incident response and architecture. * Ability to mentor and lead technical teams. ## Description We are seeking a Senior Enterprise Active Directory & Identity Architect to lead the design, implementation, and governance of enterprise identity platforms with a primary focus on Active Directory (AD) and related identity services. This role combines enterprise AD architecture with identity and access management (IAM) responsibilities, ensuring secure, scalable, and compliant solutions across the organization. You will define architecture roadmaps, patterns, and standards for AD and IAM platforms while collaborating with IT teams and business units to safeguard systems and manage user access., Active Directory & Identity Management * Design and maintain enterprise Active Directory architecture, including forests, domains, OU structure, and Group Policy Objects (GPOs). * Manage identity provisioning, de-provisioning, and role-based access controls across AD and integrated IAM platforms. * Implement and maintain secure authentication mechanisms, including MFA, Kerberos, and privileged access management. * Monitor AD health, replication, and security posture; troubleshoot and resolve directory-related issues. * Ensure compliance with internal security policies and external regulations (e.g., MTSA, GDPR) for AD and IAM environments. * Support audits and risk assessments related to AD and IAM; implement controls based on findings. * Evaluate AD-integrated IAM tools and recommend enhancements for efficiency and security. * Provide guidance and training on secure AD and IAM practices to stakeholders. Governance & Collaboration * Partner with enterprise and solution architects to drive adoption of AD and IAM platform patterns. * Collaborate with cloud and security teams to assess implications of hybrid identity solutions (Azure AD/Entra ID). * Provide business-friendly language for complex AD and identity architecture concepts. * Mentor junior security and solution architects. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)