Security Architect – AD/Entra ID

GuidePoint Security

. Lead evaluation, design, and development of Active Directory and Azure Active Directory technical requirements, solutions, and implementation roadmaps .

Posted 10/7/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Active Directory and Azure Active Directory architecture, IAM processes, and security best practices. Proficient in developing and implementing IAM solutions, managing Microsoft Graph API integrations, and optimizing security technologies for compliance and operational efficiency.

Highest-signal resume keywords

Active Directory ArchitectureAzure Active Directory DesignIdentity And Access Management (IAM)Microsoft Graph API IntegrationPowerShell Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active DirectoryAzure Active DirectoryIdentity GovernanceMulti-Factor Authentication (MFA)Single Sign-On (SSO)PowerShellMicrosoft Graph APIFederation TechnologiesActive Directory ReplicationGroup Policy

Soft Skills

Strong Communication SkillsInterpersonal SkillsCollaboration

Tools & Technologies

Microsoft Entra IDMicrosoft Security StackDefender For Office 365Defender For IdentityDefender For Cloud AppsMicrosoft Purview Information ProtectionData Loss PreventionCompliance Center

Certifications & Qualifications

CISSPCISMMicrosoft Certified: Identity And Access Administrator Associate

Industry Keywords

IAM PoliciesRegulatory ComplianceSecurity Best PracticesIncident ResolutionCrisis-Resolution

Tech Stack

Tools & technologies

AzureCloudDNS

About the role

Key responsibilities & impact

Lead evaluation, design, and development of Active Directory and Azure Active Directory technical requirements, solutions, and implementation roadmaps
Develop and enforce IAM policies, standards, and procedures for regulatory compliance and industry best practices
Introduce and implement emerging security technologies and practices for continuous IAM security architecture improvement
Provide global project and operational teams with technical advice, guidance, expertise, and risk analysis
Translate requirements into architectural designs and influence deployment of key infrastructure components
Maintain expertise in Microsoft Entra ID and related core technologies
Analyze Azure Active Directory environments, identify technical and operational challenges, and develop improvement solutions
Maintain and optimize on-premises Active Directory infrastructure, including DNS, GPOs, and domain controllers
Participate in or lead complex or high-severity troubleshooting and incident/problem resolution
Evaluate and resolve technically complex security issues, internal control issues, critical incidents, and crisis-resolution matters
Implement and enforce MFA and security best practices across user accounts and devices
Develop and manage Microsoft Graph API integrations for automation and custom applications across Microsoft 365 services
Create custom scripts to automate administrative tasks and Graph API data retrieval
Write and maintain advanced PowerShell scripts for user and resource provisioning, reporting, and service configurations across Entra ID and Active Directory
Implement and maintain security best practices

Requirements

What you’ll need

10+ years of relevant working experience in IT Security and IT Architecture
7+ years of experience with Active Directory architecture and infrastructure
In-depth understanding of Active Directory Replication, DNS, Site Links, Site Topology, Group Policy, Global Catalogs, and other core infrastructure components
3+ years of experience with Azure Active Directory architecture and design
5+ years of experience with Identity and Access Management (IAM) processes and technologies
Proven expertise in designing and implementing IAM solutions in complex environments
Expertise in Azure AD/Entra, including Conditional Access, MFA, security best practices, hybrid environments, GPOs, On-Premises Active Directory Migrations and Azure AD Connect
Experience with Microsoft Graph API for data retrieval and automation across Azure AAD
In-depth knowledge of identity governance, authentication, authorization, federation, MFA, SSO, and PAM
Understanding of federation technologies (WS-Fed, OAuth, SAML, etc.)
Enterprise/Domain Admin and/or Azure Global Admin responsibilities
Proven knowledge in managing Active Directory 2016/2019/2022 infrastructure for the Enterprise
Strong experience in PowerShell and Microsoft Graph API is required
Knowledge of Microsoft Security Stack, including Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention, and Compliance Center experience including Litigation Hold, Retention, and eDiscovery
Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels
Embraces emerging technologies, including AI tools
Up to 10% travel
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
Certifications such as CISSP, CISM, or Microsoft Certified: Identity and Access Administrator Associate are considered an asset

Benefits

Comp & perks

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
HSA contribution: $850 per employee annually / $1750 per family annually
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays
Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
Collaboration, mentorship, and guidance from knowledgeable colleagues