> Markdown version of [/jobs/ext/2566458-iam-entra-id-architect](https://www.wearedevelopers.com/jobs/ext/2566458-iam-entra-id-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Entra ID Architect - **Company:** Staffxpert Llc - **Location:** Boston, MA, United States - **Experience:** Expert - **Salary:** $130,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), User Authentication, Authentication Protocols, Microsoft Azure, Cloud Computing Security, Multi-Factor Authentication, Identity and Access Management, OAuth, OpenID, Windows PowerShell, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, Multi-Cloud - **Published:** August 10, 2026 - **Apply:** https://www.careerjet.com/jobad/us53b95b4e99f944f89817fc10e77e2988 ## About the Role * Strong hands-on experience with Microsoft Entra ID (Azure AD). * Extensive experience with Hybrid Active Directory and Entra Connect. * Proven expertise in implementing and managing Single Sign-On (SSO) solutions. * Experience configuring and administering Multi-Factor Authentication (MFA). * Strong knowledge of Conditional Access policies and identity security controls. * Experience with identity governance, access management, and privileged identity management concepts. * Proficiency with authentication and authorization protocols including SAML, OAuth, OIDC, and SCIM. * Strong PowerShell scripting skills and experience working with Microsoft Graph API. * Understanding of Zero Trust architecture and enterprise security best practices. * Excellent analytical, troubleshooting, and communication skills. Preferred Qualifications * Microsoft certifications related to Entra ID, Azure, Security, or Identity and Access Management. * Experience supporting large-scale enterprise identity transformations. * Knowledge of cloud security frameworks and compliance standards. * Experience working in hybrid and multi-cloud environments. ## Description * Design, implement, and maintain Microsoft Entra ID (Azure AD) solutions across enterprise environments. * Manage and support hybrid identity infrastructures, including Active Directory and Entra Connect. * Architect and implement secure Single Sign-On (SSO) solutions across cloud and on-premises applications. * Configure and manage Multi-Factor Authentication (MFA) and Conditional Access policies to enhance organizational security. * Develop and maintain identity governance, privileged access management, and role-based access controls. * Integrate applications using modern authentication protocols such as SAML, OAuth, OpenID Connect (OIDC), and SCIM. * Automate identity management processes using PowerShell and Microsoft Graph API. * Collaborate with security, infrastructure, and application teams to support Zero Trust security initiatives. * Troubleshoot and resolve identity-related issues while ensuring compliance with security best practices., At BBH, Partnership is more than a form of ownership-it's our approach to business and relationships. We know that supporting your professional and personal goals is the best way t… + 1 month ago ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)