Key Responsibilities
- Own identity discovery, design, migration, cutover, and stabilization for assigned acquisitions.
- Assess Active Directory forests/domains, Entra ID tenants, authentication methods, federation, privileged accounts, service accounts, and identity dependencies.
- Develop target-state identity architecture and migration strategy.
- Lead tenant-to-tenant identity migrations, including identity mapping, UPN/domain moves, coexistence, and cutover sequencing.
- Consolidate directories and establish trusts/synchronization where required.
- Configure Entra ID, SSO, MFA, Conditional Access, application registrations, and hybrid identity.
- Re-integrate SSO-enabled applications following migration.
- Migrate service principals, managed identities, service accounts, and API credentials.
- Support Azure RBAC/PIM and multi-cloud IAM where applicable.
- Build migration automation using PowerShell, Python, Microsoft Graph, APIs, and infrastructure-as-code.
- Develop migration waves, validation plans, rollback procedures, and go/no-go criteria.
- Lead cutover and post-cutover stabilization.
- Coordinate identity dependencies across M365, applications, networking, endpoint, security, and compliance teams.
- Lead/direct junior engineers where applicable.
Required Experience
- 5+ years hands-on IAM/identity engineering experience.
- Proven directory, tenant, and identity migration experience.
- Cross-tenant migrations, domain/UPN changes, and coexistence through cutover.
- Deep Microsoft Entra ID / Azure AD experience.
- Strong Active Directory expertise including forests, domains, trusts, synchronization, and account lifecycle.
- SSO, MFA, Conditional Access and Entra Connect.
- Strong understanding of SAML, OIDC, OAuth 2.0, SCIM, Kerberos and LDAP.
- Claims/attribute mapping and federation experience.
- PowerShell and Python automation.
- Microsoft Graph/API integration.
- DNS and PKI/certificate knowledge.
- PAM/IGA/access governance familiarity.
Highly Preferred
- Prior M&A identity integration.
- Quest or comparable tenant-to-tenant migration tooling.
- SOX/public-company access-control experience.
- SC-300 or comparable Microsoft identity certification.
- Consulting/client-facing delivery background.
IR35 Status:
Not specified