> Markdown version of [/jobs/ext/4539837-identity-security-architect-entra-id-iam-zero-trust](https://www.wearedevelopers.com/jobs/ext/4539837-identity-security-architect-entra-id-iam-zero-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Security Architect - Entra ID / IAM / Zero Trust - **Company:** NTT DATA, Inc. - **Location:** Irving, TX, United States - **Experience:** Expert - **Salary:** $124,800.0 - $145,600.0 - **Contract:** Contract - **Skills:** Application Programming Interfaces (APIs), User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Azure Active Directory, Cloud Services, Zero Trust Network Access, Single Sign-On, Systems Integration, Enterprise Software Applications, Customer Identity Access Management, Containerization - **Published:** November 3, 2026 - **Apply:** https://www.dice.com/job-detail/a50a52e0-d69b-4177-a466-bdf7dd3bb966 ## About the Role (What are the skills required for this job with minimum years of experience on each) * 10+ Years of Deep expertise in Identity and Access Management architecture, identity security, and enterprise access-control frameworks. * 10+ Years of Strong experience designing and implementing enterprise IAM solutions supporting workforce, privileged, application, and machine identities. * 10+ Years of Experience with Microsoft Entra ID / Azure Active Directory. * 10+ Years of Experience implementing and supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Identity Governance, Access Management, Privileged Access Management (PAM), and federation. * 10+ Years of Strong understanding of modern authentication and authorization protocols. * 10+ Years of Hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products. * 10+ Years of Strong hands-on experience with identity-security technologies such as: * Sgnl.ai * PlainID * CrowdStrike Identity Protection * Microsoft Entra ID / Azure AD * 10+ Years of Experience integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems. * 10+ Years of Strong understanding of Zero Trust Architecture and identity-centric security principles. * 10+ Years of Experience with Identity Threat Detection and Response (ITDR). * 10+ Years of Experience with identity attack-path analysis, privilege-risk identification, and lateral-movement assessment. * 10+ Years of Experience designing and implementing authorization frameworks and Policy-Based Access Control (PBAC). * 10+ Years of Experience with risk-based authentication, adaptive access, continuous verification, and identity-risk modeling. * 10+ Years of Strong product-engineering, solution-design, and enterprise security-delivery experience. * 10+ Years of Experience using APIs, identity protocols, automation, and cloud-native technologies to integrate security platforms and applications. * 10+ Years of Experience translating business and security requirements into scalable technical architectures and engineering solutions. * 10+ Years of Strong understanding of enterprise security architecture, authentication, authorization, access governance, and identity lifecycle-management principles. * Strong analytical, troubleshooting, problem-solving, stakeholder-management, and technical-leadership skills. * Ability to collaborate effectively with cybersecurity, IAM, cloud, infrastructure, application, architecture, engineering, and vendor teams., * 10+ years of experience in Cybersecurity, Identity and Access Management, Identity Architecture, Security Engineering, or a related security discipline. * Experience leading enterprise-scale identity-security or IAM transformation programs. * Experience designing or implementing Zero Trust security programs. * Familiarity with NIST cybersecurity guidance, Zero Trust frameworks, and modern enterprise security standards. * Experience working within large, complex, highly regulated enterprise environments. * Experience implementing large-scale identity threat detection, attack-path analysis, or identity-risk-management programs. * Experience with advanced Policy-Based Access Control and identity-aware authorization models. * CISSP certification. * CCSP certification. * Microsoft Azure Security Engineer certification. * CIAM, IAM, or other relevant Identity and Access Management certifications. * Equivalent cybersecurity, cloud-security, or identity-security certifications. ## Description * Define and execute enterprise identity security strategies and roadmaps aligned with Zero Trust principles and broader cybersecurity objectives. * Design scalable Identity and Access Management (IAM) architectures supporting workforce identities, privileged identities, service accounts, machine identities, and enterprise applications. * Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats. * Establish architectural standards and design principles for authentication, authorization, access governance, identity lifecycle management, and privileged access. * Lead engineering, integration, deployment, and operationalization of enterprise identity security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID. * Partner with security product vendors, architecture teams, engineering teams, infrastructure teams, cloud teams, and application teams to deliver scalable identity-security solutions. * Integrate identity-security capabilities with enterprise applications, cloud platforms, infrastructure services, authentication platforms, and security tooling. * Design and expand identity attack-path analysis capabilities to identify exploitable privilege relationships, lateral-movement paths, excessive entitlements, and identity-based risks. * Implement identity threat detection, risk scoring, attack containment, and remediation capabilities. * Develop processes and technical controls to proactively identify privilege-escalation paths and unauthorized access opportunities. * Improve visibility into identity relationships, entitlements, authentication activity, access patterns, and associated security risks. * Support modernization of enterprise authentication services, including enhancements to authenticator capabilities and user authentication experiences. * Drive adoption of strong authentication, Multi-Factor Authentication (MFA), adaptive access, and risk-based authentication controls. * Design and implement Policy-Based Access Control (PBAC) capabilities using platforms such as PlainID. * Develop identity-aware authorization models that improve enterprise security while reducing access-management complexity. * Design identity-risk models supporting adaptive authentication, authorization, continuous verification, and Zero Trust access decisions. * Leverage identity intelligence, security signals, and behavioral context to improve access decisions and security controls. * Design and integrate IAM capabilities including Single Sign-On, federation, authentication, authorization, identity governance, access management, and Privileged Access Management. * Develop secure integrations using APIs, modern identity protocols, automation, and cloud-native architectures. * Translate business, security, regulatory, and technology requirements into secure and scalable identity architecture and engineering solutions. * Conduct architecture reviews, security-design reviews, product evaluations, and technical implementation discussions. * Provide technical leadership and guidance to engineering teams implementing identity and access-security solutions.