> Markdown version of [/jobs/ext/4156941-principal-identity-and-access-management-architect](https://www.wearedevelopers.com/jobs/ext/4156941-principal-identity-and-access-management-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal - Identity and Access Management Architect - **Company:** Slalom, LLC - **Location:** Atlanta, GA, United States - **Experience:** Expert - **Salary:** $136,500 - $169,500 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Artificial Intelligence, Microsoft Azure, Microsoft Online Services, Cloud Computing, Cyber Security, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Microsoft Security Essentials, NT LAN Manager, Public Key Infrastructure, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Virtual Agents, Key Vault - **Published:** October 19, 2026 - **Apply:** https://www.disabledperson.com/jobs/76142541-principal-identity-and-access-management-architect ## About the Role * Demonstrated experience developing enterprise identity architectures. * Experience leading architecture decisions across complex, multi-forest/multi-tenant environments. * Ability to communicate architecture to both executives and engineers. Consulting & Leadership * Experience leading complex identity transformation programs at the CISO/CIO level. * Demonstrated experience leading multidisciplinary technical teams. * Strong executive communication skills and experience mentoring identity professionals. ## Description We are seeking a Senior Consultant or Principal - Microsoft Security, Identity & Access Architecture to help lead Slalom's established Entra Suite and hybrid identity capability. This is a senior technical leadership role for an experienced Microsoft identity practitioner who combines deep technical expertise across Microsoft Entra, Active Directory Domain Services, and hybrid identity infrastructure, including Microsoft's frontier identity landscape of Microsoft Agent 365 and Entra Agent ID governing non-human and AI agent identities, with enterprise and security architecture, consulting leadership, business development, and Microsoft ecosystem experience. You will be responsible for leading and growing this already-established capability: owning the technical vision, evolving existing offerings and intellectual property, deepening client relationships, partnering with Microsoft, supporting sales pursuits, and mentoring junior team members so the capability continues to scale across Slalom. This is not simply an implementation role. You will lead the capability, sell the capability, deliver the capability, and develop the junior consultants who will scale it. What You'll Do Support Microsoft Identity Capabilities * Contribute to Slalom's Identity & Access Architecture capabilities across the full Entra Suite, hybrid AD, and Microsoft Agent 365/Entra Agent ID. * Support the capability's technical strategy, offerings, delivery methodology, and roadmap. * Maintain reference architectures, accelerators, and playbooks. * Uphold technical standards: Zero Trust identity, tiered administration/Enterprise Access Model, AD DS hardening, Conditional Access and PIM by default, documented hybrid trust with break-glass procedures, and governed PKI. Build Microsoft Relationships * Maintain strong relationships across the Microsoft Security and Identity field organization. * Track the Entra roadmap and emerging hybrid identity capabilities. * Support Microsoft partner programs and represent Slalom at Microsoft and industry events. Mentor and Grow the Team * Mentor junior and mid-level consultants across cloud identity and AD DS disciplines. * Coach through hands-on project work, shadowing, and technical review. * Guide skill development, certifications, and career paths. Deliver Client Outcomes * Lead complex identity transformations from strategy through operationalization. * Assess AD DS forests and Entra tenants; lead modernization and consolidation roadmaps. * Implement Entra ID Governance, Conditional Access, PIM, Verified ID, and AD DS hardening. * Help clients move from legacy AD-centric identity to a sustainable hybrid, cloud-first model. Required Qualifications Microsoft Identity Expertise * Advise CISOs, CIOs, and enterprise architects on modernizing identity and access management. * Deep, hands-on expertise across: * Entra ID, Entra ID Governance, Permissions Management, Verified ID, Workload ID, Private Access, and Internet Access * AD DS: forest/domain design, trusts, Group Policy, DNS, and DHCP * Hybrid identity: Entra Connect Sync/Cloud Sync, PHS/PTA, Seamless SSO, and hybrid/Entra join * AD FS and federation migration to Entra ID * AD CS and PKI * Defender for Identity * Microsoft Agent 365/Entra Agent ID: Agent Identity Blueprints, Blueprint Principals, Agent Identities, and AI Teammate accounts * Azure identity: RBAC, managed identity/workload identity federation, and Key Vault access policies * Strong grasp of Conditional Access, PIM, and Zero Trust access models. * Experience leading AD-to-Entra migrations and AD DS modernization/consolidation. * Strong understanding of Kerberos, NTLM, LDAP, and directory hardening.