Identity Architect

Senior hands-on Identity Architect responsible for leading identity integration during acquisitions. This person will own the identity domain from discovery and target-state architecture through cross-tenant coexistence, scripting, migration, and final cutover while leading a small engineering team. * Own the identity workstream end to end across M&A integrations, from discovery and architecture through migration and final cutover. * Assess acquired-company environments including Active Directory forests/domains, Entra ID tenants, federation, privileged accounts, SSO applications, and non-human identities. * Design target-state identity architecture aligned with the parent organization’s Entra ID/M365 standards. * Develop cross-tenant coexistence and migration strategies, including UPN and domain moves. * Assess dependencies involving SSO applications, devices, service accounts, and service principals. * Re-point and migrate applications using SAML, OIDC, OAuth and SCIM. * Build migration sequencing, rollback procedures, and go/no-go criteria. * Partner with security and compliance teams to implement appropriate access controls, including SOX requirements. * Perform hands-on PowerShell, Python, and Microsoft Graph automation. * Lead cutover execution and ultimately retire/decommission source identity environments. * Direct 2-3 engineers and coordinate with program architects, security, compliance, application owners, and acquired-company IT teams

• 8+ years of Identity and Access Management experience. * Proven architecture/design ownership for cross-tenant identity migrations. * Deep Microsoft Entra ID experience, including Conditional Access, SSO, MFA, and Entra Connect. * Deep Active Directory expertise. * Strong SAML, OIDC, OAuth, SCIM, and claims-mapping experience. * Hands-on PowerShell. * Python and Microsoft Graph experience. * Strong DNS and PKI knowledge. * Ability to own discovery, architecture, planning, risk, migration, and cutover execution rather than functioning solely as a high-level architect. * Ability to lead engineers while remaining hands-on. * Previous M&A integration experience. * SC-300 certification. * Quest or comparable identity/migration tooling. * AWS, GCP, or OCI identity experience. * Experience supporting construction, energy, utilities, or another field-heavy organization.