IAM Security Architect

NexTbil Tech

. Design and maintain enterprise IAM security architecture focused on Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity integrations, and hybrid identity environments .

Posted 10/2/2026full-timeHyderabad • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining enterprise IAM security architecture, particularly with Microsoft Azure and Entra ID. Proficient in implementing Zero Trust models, identity governance, and compliance standards while collaborating with cross-functional teams.

Highest-signal resume keywords

Microsoft Entra IDIdentity And Access ManagementZero Trust ArchitectureSAML, OAuth 2.0, OpenID ConnectMicrosoft Certified: Cybersecurity Architect Expert

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle GovernanceConditional AccessMulti-Factor AuthenticationPrivileged Identity ManagementAccess ReviewsIdentity ProtectionApplication Integration PatternsPowerShellMicrosoft Graph APITerraform

Soft Skills

Strong Written CommunicationStrong Verbal Communication

Tools & Technologies

Microsoft SentinelMicrosoft Defender For CloudAzure Key VaultMicrosoft 365Azure CLI

Certifications & Qualifications

Microsoft Certified: Cybersecurity Architect ExpertAzure Solutions Architect ExpertCISSPCISMCCSP

Industry Keywords

CybersecurityCloud SecurityNIST Cybersecurity FrameworkISO 27001CIS Benchmarks

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityTerraformVault

About the role

Key responsibilities & impact

Design and maintain enterprise IAM security architecture focused on Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity integrations, and hybrid identity environments
Architect and govern Entra ID capabilities including Conditional Access, MFA, Identity Protection, Privileged Identity Management, Access Reviews, Entitlement Management, and lifecycle workflows
Define and enforce Zero Trust and least-privilege access models across users, administrators, service principals, managed identities, applications, groups, and Azure resources
Lead secure authentication and authorization design using SAML, OAuth 2.0, OpenID Connect, SCIM, federation, single sign-on, and application access integration patterns
Govern Azure application registrations, enterprise applications, API permissions, consent settings, secrets, certificates, service principals, and workload identities
Design privileged access controls including just-in-time elevation, approval workflows, break-glass account controls, access reviews, and administrative role hardening
Develop identity security standards, reference architectures, design patterns, roadmaps, and control requirements aligned with policy, regulation, and audit readiness
Partner with security engineering, cloud platform, infrastructure, application, GRC, SOC, business, and other teams
Support identity risk assessment, control validation, incident response, and remediation involving compromised accounts, excessive privileges, risky sign-ins, misconfigured applications, and identity governance gaps

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline; equivalent professional experience may be considered
5+ years of experience in cybersecurity, identity and access management, cloud security, security architecture, or infrastructure security
Significant hands-on experience in Microsoft identity platforms
Deep knowledge of Microsoft Entra ID, Azure RBAC, Conditional Access, MFA, Identity Protection, Privileged Identity Management, Access Reviews, Entitlement Management, and identity lifecycle governance
Strong understanding of Active Directory, hybrid identity, Entra Connect or Cloud Sync, federation, directory synchronization, Microsoft 365 identity dependencies, and enterprise authentication patterns
Experience designing SSO and application integration patterns using SAML, OAuth 2.0, OpenID Connect, SCIM, APIs, service principals, managed identities, and application registration governance
Ability to translate business, regulatory, and security requirements into identity architecture, control standards, implementation roadmaps, and operational guardrails
Strong written and verbal communication skills
Experience supporting audit, compliance, control testing, access certification, identity risk remediation, and evidence generation for regulated or compliance-focused environments
Preferred Microsoft certifications, including Microsoft Certified: Cybersecurity Architect Expert, Azure Solutions Architect Expert, Azure Security Engineer Associate, Identity and Access Administrator Associate, or Microsoft 365 Enterprise Administrator Expert
Preferred security certifications such as CISSP, CISM, CCSP, or equivalent credentials
Experience with Microsoft Sentinel, Microsoft Defender for Cloud, Defender for Identity, Defender for Cloud Apps, Azure Key Vault, and identity-related detection or monitoring use cases
Experience automating IAM and Azure security controls using PowerShell, Microsoft Graph API, Azure CLI, Terraform, Bicep, ARM templates, or CI/CD pipelines
Knowledge of Zero Trust architecture, NIST Cybersecurity Framework, ISO 27001, CIS benchmarks, least privilege, separation of duties, and privileged access governance
Exposure to AWS IAM or Google Cloud IAM is beneficial

Benefits

Comp & perks

Competitive salary package
Performance-based bonuses
Remote and hybrid working models
Comprehensive health insurance
Wellness initiatives and physical and mental well-being resources
Training programs
Mentorship
Clearly defined career development paths
Supportive, inclusive, and growth-focused environment
Diversity, inclusion, and collaboration culture
Regular team-building activities and social events
Medical insurance
Competitive compensation and performance-based incentives