> Markdown version of [/jobs/ext/4066375-identity-architect](https://www.wearedevelopers.com/jobs/ext/4066375-identity-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Architect

- **Company:** Loenbro, LLC
- **Location:** Westminster, CO, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, User Authentication, Authentication Protocols, Business Systems, Software as a Service, Cloud Computing, Cyber Security, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Systems Integration
- **Published:** October 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4f14bc27688fd4ad

## About the Role

* 10+ years of experience in Identity and Access Management (IAM), Information Security, Infrastructure Engineering, or related disciplines.
 * 3+ years of experience designing and implementing enterprise IAM architectures.
 * Required: Deep expertise with Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and Hybrid Identity.
 * Required: Hands-on experience deploying and supporting FIDO2 authentication, Windows Hello for Business, and TPM-backed authentication solutions.
 * Strong understanding of Zero Trust security principles and modern authentication protocols including SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.
 * Experience with identity lifecycle management, role-based access control (RBAC), and privileged access management (PAM).
 * Experience integrating SaaS, cloud, and on-premises applications with centralized identity platforms.
 * Knowledge of identity-related compliance and audit requirements, including SOX, SOC, and security control frameworks.
 * Experience architecting identity solutions for hybrid and cloud-first environments.
 * Strong project management, documentation, communication, and stakeholder engagement skills.
 * Preferred certifications: Microsoft Certified Identity and Access Administrator Associate (SC-300), Cybersecurity Architect Expert (SC-100), CISSP, or CISM.
 * Experience with future-state identity governance, access reviews, automated provisioning, privileged access controls, and enterprise IAM transformation initiatives is highly preferred.

## Description

The Identity Architect is responsible for designing, implementing, and evolving the organization's enterprise identity and access management (IAM) strategy. This role will serve as the technical leader for Microsoft Entra ID, identity governance, authentication modernization, and passwordless initiatives, including TPM-backed authentication, FIDO2 security keys, and Windows Hello for Business. The Identity Architect will partner with security, infrastructure, cloud, and business teams to develop scalable identity solutions that enhance security, support compliance requirements, and improve the user experience. While initially focused on Entra ID and modern authentication technologies, the role will expand to support broader IAM, Zero Trust, privilege management, and identity governance initiatives across the enterprise. This is a hands on role., * Collaboration: Regular interaction with HR, IT, Business Systems, application vendors, and business stakeholders through virtual meetings and communication platforms.

 * Travel: Occasional travel may be required for company meetings, training, project activities, or other business needs.

This role requires compliance with all applicable safety regulations, personal protective equipment (PPE) requirements, and Loenbro's Environmental Health and Safety (EH&S) policies.