> Markdown version of [/jobs/ext/4517386-identity-architect](https://www.wearedevelopers.com/jobs/ext/4517386-identity-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Architect

- **Company:** Insight Global
- **Location:** Addison, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Microsoft Online Services, Domain Name System (DNS), Python (Programming Language), OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Azure Active Directory, Security Assertion Markup Language (SAML), Oracle Cloud Infrastructure
- **Published:** November 1, 2026
- **Apply:** https://dejobs.org/x/x/E9DACD70E8C34C61AF44570FA72B5DEA/job/

## About the Role

* 8+ years of Identity and Access Management experience. * Proven architecture/design ownership for cross-tenant identity migrations. * Deep Microsoft Entra ID experience, including Conditional Access, SSO, MFA, and Entra Connect. * Deep Active Directory expertise. * Strong SAML, OIDC, OAuth, SCIM, and claims-mapping experience. * Hands-on PowerShell. * Python and Microsoft Graph experience. * Strong DNS and PKI knowledge. * Ability to own discovery, architecture, planning, risk, migration, and cutover execution rather than functioning solely as a high-level architect. * Ability to lead engineers while remaining hands-on. * Previous M&A integration experience. * SC-300 certification. * Quest or comparable identity/migration tooling. * AWS, GCP, or OCI identity experience. * Experience supporting construction, energy, utilities, or another field-heavy organization.

## Description

Senior hands-on Identity Architect responsible for leading identity integration during acquisitions. This person will own the identity domain from discovery and target-state architecture through cross-tenant coexistence, scripting, migration, and final cutover while leading a small engineering team. * Own the identity workstream end to end across M&A integrations, from discovery and architecture through migration and final cutover. * Assess acquired-company environments including Active Directory forests/domains, Entra ID tenants, federation, privileged accounts, SSO applications, and non-human identities. * Design target-state identity architecture aligned with the parent organization's Entra ID/M365 standards. * Develop cross-tenant coexistence and migration strategies, including UPN and domain moves. * Assess dependencies involving SSO applications, devices, service accounts, and service principals. * Re-point and migrate applications using SAML, OIDC, OAuth and SCIM. * Build
migration sequencing, rollback procedures, and go/no-go criteria. * Partner with security and compliance teams to implement appropriate access controls, including SOX requirements. * Perform hands-on PowerShell, Python, and Microsoft Graph automation. * Lead cutover execution and ultimately retire/decommission source identity environments. * Direct 2-3 engineers and coordinate with program architects, security, compliance, application owners, and acquired-company IT teams