Iam Active Directory Entra Id Architect

IAM Active Directory Entra ID Architect page is loaded

**IAM Active Directory Entra ID Architect**:
Time type: Full time

Posted on: Posted 2 Days Ago

Job requisition id: R-20250121-0049

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity. As a purpose-led, performance-driven company, we are committed to inclusion, diversity, equity, and action.

**What will you do?**

A day in the life of a IAM Active Directory Entra ID Architect at VF looks a little like this:

- Lead the evaluation, design, and development of Active Directory & Azure Active Directory technical requirements, solutions, and implementation roadmap to ensure a functional, reliable, secure, and cost-effective technology environment.
- Develop and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
- Ensure continuous improvement within the IAM security architecture by introducing and implementing emerging security technologies and practices.
- Provide technical advice, guidance, expertise, and risk analysis on your area of expertise to global project and operational teams.
- Translate requirements into an architectural design and influence the deployment of key infrastructure components.
- Maintain a thorough understanding of existing and emerging Microsoft Entra ID and related core technologies.
- Analyze current Azure Active Directory environment to identify both technical and operational challenges while making recommendations and developing solutions for improvement.
- Maintain and optimize on-premises Active Directory (AD) infrastructure, including DNS, GPOs, and domain controllers.
- Participate in or lead complex or high severity troubleshooting and incident/problem resolutions with other infrastructure teams.
- Evaluate and ensure the resolution of technically complex security issues, internal control issues, critical incidents and/or crisis resolution management, escalating as necessary.
- Implement and enforce Multi-Factor Authentication (MFA) and security best practices across user accounts and devices.
- Create custom scripts to automate administrative tasks and data retrieval from the Graph API, enhancing operational efficiency.
- Write and maintain advanced PowerShell scripts to automate user and resource provisioning, reporting, and service configurations across Entra ID and Active Directory.
- Implement and maintain security best practices.

**What do you need to succeed?**
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- 10+ years of relevant working experience in IT Security and IT Architecture.
- 7+ years of experience with Active Directory architecture and infrastructure, with an in-depth understanding of Active Directory Replication, DNS, Site Links, Site Topology, Group Policy, Global Catalogs, and other core infrastructure components.
- 3+ years of experience with Azure Active Directory architecture and design.
- 5+ years of experience with Identity and Access Management (IAM) processes and technologies.
- Proven expertise in designing and implementing IAM solutions in complex environments preferably Saviynt.
- Expertise in managing Azure AD/Entra, including Conditional Access, MFA, security best practices, hybrid environments, GPO's, On-Premises Active Directory Migrations and Azure AD Connect.
- Experience with Microsoft Graph API for data retrieval and automation across Azure AAD.
- In-depth knowledge of identity governance, authentication, authorization, and federation including MFA, SSO, and PAM.
- Understanding of federation technologies (WS-Fed, OAuth, SAML, etc.).
- Enterprise/Domain Admin and/or Azure Global Admin responsibilities.
- Proven knowledge in managing Active Directory 2016/2019/2022 infrastructure for the Enterprise.
- Strong experience in PowerShell and Microsoft Graph API is required.
- Knowledgeable of Microsoft Security Stack: Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention and Compliance Center Experience including - Litigation Hold, Retention, and eDiscovery.
- Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
- Relevant certifications such as CISSP, CISM, or Microsoft Certified: Identity and Access Administrator Associate are considered an asset.

**What do we offer you?**

At VF, we know you expect as much from us as we do from you. That is why we make a commitment to support and grow our people. We offer extensive development and growth opportunities for your current and future positions, a competitive compensation package, and a strong benefits package that includes medical, dental, vision, and 401(k).

Our commitment extends beyond this and into your daily work life. We strive to foster a diverse and inclusive culture based on respect, connection, and a