> Markdown version of [/jobs/ext/3056983-entra-id-ad-architect](https://www.wearedevelopers.com/jobs/ext/3056983-entra-id-ad-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Entra ID & AD Architect

- **Company:** Globalfoundries U.S. Inc.
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Salary:** $124,000.0 - $208,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Cloud Computing, Cyber Security, OpenID, Windows PowerShell, Runbook, Security Assertion Markup Language (SAML), Information Technology, 3-tier Architectures
- **Published:** September 24, 2026
- **Apply:** https://www.jofdav.com/jobs/59849070-entra-id-ad-architect

## About the Role

* Education - Bachelor in Computer Science or related field.
 * Experience - Minimum 15 Years in field.
 * Fluency in English Language - written & verbal

Preferred Qualifications:

 * Translates complex identity concepts into clear, audience-appropriate language - able to brief executives, write precise documentation, and guide hands-on engineers with equal ease.
 * Strong written skills for architecture documents, runbooks, and decision records.
 * Confident, respectful communicator in design reviews, incident bridges, and cross-team negotiations
 * Ownership mindset - treats the identity platform as their own; sees problems through to root-cause resolution rather than handing them off.
 * Proactive and self-directed; identifies risks and improvement opportunities without being asked.
 * Calm, composed, and decisive under pressure during outages and security incidents.
 * Humble and coachable - open to feedback and willing to say "I don't know, let me find out."

## Description

* Own the end-to-end architecture for hybrid identity spanning on-premises Active Directory, Entra ID, and Entra Connect / Cloud Sync.
 * Design and document target-state identity reference architectures, including authentication flows, trust topologies, forest/domain design, and tenant strategy.
 * Configure and optimize Entra ID capabilities: SSO/SAML/OIDC federation, application registrations & enterprise apps, App Proxy, B2B/B2C, dynamic groups, and Entra ID Governance (access reviews, entitlement management, lifecycle workflows).
 * Automate identity operations using PowerShell and Microsoft Graph API
 * Partner with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response for identity-based attacks (Golden Ticket, password spray, token theft, etc.).
 * Act as Tier 3 / final escalation for complex identity incidents and outages.
 * Establish standards, best practices, and guardrails; review designs from junior engineers and vendor partners.
 * Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, and architecture decision records.
 * Mentor engineers and uplift the broader team's identity capability through knowledge transfer and design reviews.

Other Responsibilities:

 * Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
 * Builds trust across security, infrastructure, app, and cloud teams; influences without authority as an individual contributor.
 * Team-first orientation - shares knowledge generously and mentors others rather than hoarding expertise.

 * Diplomatic in handling competing priorities and pushing back on insecure or non-standard requests.