Identity Architect – CyberArk & Entra ID

Key Responsibilities

• Architect, implement, maintain, and continuously improve enterprise Active Directory environments, including multi-domain and multi-forest architectures.
• Establish secure Active Directory tiering, delegation, security baselines, and privileged-access models.
• Maintain directory health across replication, domain and forest trusts, Sites & Services, domain controllers, and directory recovery capabilities.
• Lead Active Directory security hardening, hygiene assessments, attack-surface reduction, schema management, and privileged-access controls.
• Direct the architecture, configuration, security, and operational governance of Entra ID.
• Design and maintain Entra ID conditional-access and multifactor-authentication strategies aligned with least-privilege principles.
• Govern enterprise application onboarding, application registrations, external identities, user and group access, and identity lifecycle controls within Entra ID.
• Perform periodic Entra ID architecture and security assessments and recommend improvements based on identified risks and enterprise requirements.
• Lead privileged credential and access management through CyberArk, including credential vaulting, rotation, privileged-account onboarding, and break-glass account governance.
• Drive CyberArk privileged-access improvements that enforce controlled, time-limited, and least-privilege access patterns.
• Support investigation and remediation of identity-security incidents involving CyberArk, Entra ID, and Active Directory.
• Provide senior technical leadership and architectural guidance for identity-security initiatives involving CyberArk, Entra ID, and Active Directory.
• Collaborate with infrastructure, security, and application teams to deliver integrated and resilient enterprise identity solutions.
• Support audit and regulatory activities by providing appropriate identity-security evidence and driving remediation of identified control gaps.
• Contribute to executive-level reporting and recommendations concerning enterprise identity-security posture.

Required Skills

• CyberArk
• Entra ID
• Active Directory

Experience

• 8+ years of cybersecurity experience, including 6+ years specifically in identity and access management.
• Experience in architecting and operating enterprise Active Directory and hybrid identity environments.
• Experince in working with Entra ID and cloud-based identity environments.
• Experince in designing and managing privileged-access solutions.
• Demonstrated experience operating identity services in complex enterprise environments.