Business Consultant Identity Architect

Job Summary We are seeking an experienced Business Consultant Identity Architect to lead the design, implementation, and governance of enterprise Identity and Access Management solutions across on-premises, hybrid, and cloud environments. The ideal candidate will possess deep expertise in Microsoft Active Directory, Microsoft Entra ID (Azure Active Directory), and Microsoft Intune, with a strong background in identity architecture, authentication technologies, endpoint management, and enterprise transformation initiatives. Key Responsibilities

• Serve as the primary technical expert for Microsoft Active Directory, Microsoft Entra ID (Azure Active Directory), and Microsoft Intune.
• Architect, implement, and oversee enterprise Identity and Access Management solutions across on-premises, hybrid, and cloud-based environments.
• Develop secure directory trust and domain collaboration models to support interaction across business units, partners, and external organizations.
• Lead identity and access integration efforts for enterprise transformation initiatives, including mergers, acquisitions, divestitures, consolidations, and organizational separations.
• Evaluate existing identity, directory, endpoint, and infrastructure environments to define future-state architecture and transition strategies.
• Design secure authentication, access control, federation, and Single Sign-On solutions across multiple platforms, applications, directories, and domains.
• Collaborate with Enterprise Architecture, Cybersecurity, Infrastructure, Endpoint Management, IAM, and Application teams to ensure alignment with enterprise standards and governance requirements.
• Provide technical leadership for endpoint management through Microsoft Intune, including device onboarding, configuration profiles, compliance policies, security controls, and device lifecycle management.
• Assess risks related to identity architecture, directory services, endpoint security, authentication flows, and infrastructure changes, and recommend mitigation strategies.
• Support directory migration, consolidation, coexistence, synchronization, and modernization initiatives.
• Create and maintain architecture documentation, design standards, governance materials, implementation guides, operational procedures, and runbooks.
• Ensure identity, authentication, directory, and endpoint management solutions comply with security policies, regulatory requirements, and enterprise architecture standards. Required Qualifications
• 10+ years of experience in Identity and Access Management, infrastructure architecture, directory services, endpoint management, or related enterprise technology roles.
• Strong hands-on experience with Microsoft Active Directory, Microsoft Entra ID (Azure Active Directory), and Microsoft Intune.
• Proven experience designing and delivering enterprise identity solutions across hybrid, cloud, and multi-domain environments.
• Experience defining directory integration models, domain trust architectures, identity synchronization strategies, and coexistence approaches.
• Strong knowledge of authentication and authorization technologies, including SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, federation, and Single Sign-On (SSO).
• Experience supporting identity integration initiatives related to mergers, acquisitions, divestitures, enterprise separations, or large-scale transformation programs.
• Solid understanding of endpoint management, device compliance, device security, lifecycle management, and policy enforcement.
• Ability to assess technical risks, identify security and architecture gaps, and implement effective mitigation strategies.
• Experience collaborating with cross-functional teams including security, infrastructure, architecture, application, endpoint, and business stakeholders.
• Strong communication, documentation, analytical, and problem-solving skills.