Microsoft Identity & Access Architect

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

Experience

At least 5 years of experience as an Identity Architect specializing in Microsoft technologies.

Demonstrable experience in the design, implementation, and evolution of Microsoft Active Directory in complex organizations.

Proven experience in Microsoft Entra ID and hybrid identity architectures.

Experience leading transformation and modernization projects for corporate identity platforms.

Participation in domain consolidation, forest migration, and Active Directory environment transformation projects.

Experience in modern authentication solutions, identity federation, and Single Sign-On.

Experience in the design of Identity & Access Management (IAM) strategies.

Experience in the implementation of advanced identity protection mechanisms and privileged access management.

Experience collaborating with Security, Development, Architecture, and Operations teams.

Experience in the definition and validation of HLD and LLD designs.

Ability to technically lead complex initiatives and act as a technological reference for clients.

Excellent communication, presentation, and technical solution defense skills.

Experience in international projects and large-scale enterprise environments.

To perform the role, the skills that would best fit the team and the project would be:

Organizational and communication skills. Client orientation.

Excellent technical skills.

Passion for emerging technologies and client solutions.

Team management and leadership to achieve service delivery and efficiency.

Ability to build trusting relationships with clients and maintain control in stressful situations.

Sense of urgency.

Attention to detail.

Synthesis and executive skills.

Education

Required:

Degree in Computer Engineering, Telecommunications Engineering, or similar.

Desirable:

Official certifications related to the role will be valued, for example:

Microsoft Certified: Identity and Access Administrator Associate (SC-300).

Microsoft Certified: Cybersecurity Architect Expert (SC-100).

Microsoft Certified: Azure Solutions Architect Expert (AZ-305).

Microsoft Certified: Azure Administrator Associate (AZ-104).

An MBA or Master's degree in technical areas will be positively valued.

Required: English

• Work-life balance measures and flexible working hours. • Ongoing training and certifications. • Hybrid remote work model. • Attractive social benefits package. • Excellent dynamic and multidisciplinary work environment. • Volunteering programs. #WeAreDiverse #WePromoteEquality

The Microsoft Identity Architect will perform a strategic role in the design, evolution, and transformation of identity and access solutions for enterprise clients. They will be responsible for defining architectures based on Microsoft Active Directory and Microsoft Entra ID, in both on-premise, cloud, and hybrid environments, guaranteeing the security, scalability, resilience, and sustainability of corporate identity services.

They will work in a coordinated manner with Architecture, Engineering, Security, Operations, and Development teams to design authentication, authorization, identity governance, and access management solutions aligned with business needs and our clients' security standards.

The ideal candidate will have experience in identity platform transformation projects, Active Directory modernization, Microsoft Entra ID implementation, and the adoption of Zero Trust models. Additionally, they will be able to act as a technical reference in complex migration, integration, and technological evolution initiatives.

In short, this technical profile would play a very important role in the evaluation, design, and implementation of infrastructure solutions for various clients, ensuring their needs and requirements are met.

Their day-to-day would be highly diverse, working closely with TECH technical teams and clients to ensure project success.

What you will do in your day-to-day:

Define the strategy, architecture, and evolution of corporate identity and access platforms based on Microsoft technologies.

Design hybrid identity solutions integrating On-Premises Active Directory and Microsoft Entra ID environments, guaranteeing a secure and consistent experience for users, applications, and services.

Participate actively in the definition of technological architectures together with Development, Application Architecture, Infrastructure, Cybersecurity, and Operations teams.

Design authentication, authorization, and access control architectures aligned with business, security, and regulatory compliance requirements.

Technically lead transformation, consolidation, and modernization projects of corporate identity platforms.

Define architectures for the integration of corporate applications with identity services, facilitating Single Sign-On (SSO) models, federation, and centralized access management.

Design and implement identity and access management (IAM) solutions, identity governance, and privilege administration.

Define and drive the adoption of Zero Trust models, multi-factor authentication (MFA), conditional access, and identity protection.

Lead migration, consolidation, and transformation initiatives for domains, forests, and identity platforms in both on-premise and cloud environments.

Define standards, best practices, and governance models for corporate identity services.

Evaluate new technologies and capabilities within the Microsoft ecosystem related to identity, security, and access management.

Prepare high-level design (HLD) and low-level design (LLD) documentation, as well as participate in technical review, validation, and approval processes.

Act as a technical reference for the infrastructure, development, security, and operations areas regarding all matters related to identity services.

Identify technical risks, dependencies, and improvement opportunities, proposing technological evolution roadmaps aligned with the corporate strategy.

Microsoft Active Directory Domain Services (AD DS).

Microsoft Entra ID (Azure Active Directory).

Microsoft Entra Connect and hybrid identity synchronization.

Design and administration of forests, domains, trusts, sites, and replication.

Advanced design and administration of Group Policies (GPO).

LDAP, LDAPS, Kerberos, and DNS integrated with Active Directory.

Microsoft Entra ID Governance.

Microsoft Entra Privileged Identity Management (PIM).

Microsoft Entra Conditional Access.

Microsoft Entra Multifactor Authentication (MFA).

Single Sign-On (SSO).

Identity federation via ADFS.

SAML, OAuth 2.0, and OpenID Connect protocols.

Identity & Access Management (IAM).

Privileged Access Management (PAM).

Zero Trust models applied to identity and access.

Microsoft Defender for Identity.

Hardening and securing of Active Directory.

Administration and protection of Tier 0 environments.

Public Key Infrastructure (PKI).

Active Directory Certificate Services (AD CS).

Digital certificates and Microsoft cryptographic services.

Automation using PowerShell.

Active Directory migrations and consolidations.

Hybrid coexistence strategies between on-premise environments and Microsoft Azure.

Identity architectures for Microsoft 365, Azure, and enterprise applications.

Audit, monitoring, and governance of identity platforms.

Design of resilient, secure, and scalable architectures for corporate identity services.