Overview

Seeking a highly experienced Senior Azure Identity & MIM Modernization Architect to provide technical leadership. The architect will lead the design, governance, and implementation oversight of clients transition from Microsoft Identity Manager (MIM) to a modern cloud-based identity platform built on Microsoft Entra ID and Azure services. This individual will serve as the primary technical authority for identity architecture, Azure platform services, lifecycle management, security, automation, and enterprise integrations across Workday, Banner, Active Directory, Exchange Online, AD LDS, Lenel, Genetec.

Key Responsibilities

• Azure Architecture Leadership
  • Design and govern enterprise-scale Azure identity and integration architectures.
  • Lead adoption of Microsoft Entra ID, Identity Governance, Conditional Access, and Zero Trust principles.
  • Architect Azure-native solutions leveraging:
    • Azure Functions
    • Azure Logic Apps
    • Azure Automation
    • Azure Data Factory
    • Azure SQL Database
    • Azure Storage
    • Azure Key Vault
    • Azure Monitor
    • Azure Application Insights
    • Microsoft Sentinel
  • Define high-availability, disaster recovery, monitoring, and operational support models.
• MIM Assessment & Modernization
  • Conduct detailed analysis of the current MIM environment, including:
    • Synchronization Rules
    • Metaverse Design
    • Management Agents
    • MPRs and Workflows
    • Custom Extensions
    • Provisioning Logic
  • Develop migration and decommissioning strategy for MIM.
  • Design cloud-native alternatives using Entra ID, Azure Automation, Logic Apps, and API-driven integrations.
• Identity & Access Management
  • Design lifecycle management processes for:
    • Students
    • Faculty
    • Staff
    • Contractors
    • Alumni
  • Implement RBAC and least-privilege access models.
  • Design automated provisioning and deprovisioning workflows.
  • Support identity governance, attestation, and access certification processes.
• Enterprise Integration Architecture
  • Lead architecture and integration strategy for:
    • Workday
    • Banner SIS
    • AD LDS
    • Lenel
    • Genetec
  • Design event-driven and API-based provisioning architectures.
  • Define data transformation and orchestration strategies.
• Security & Compliance
  • Implement and oversee:
    • Conditional Access Policies
    • Multi-Factor Authentication
    • Privileged Identity Management (PIM)
    • Identity Governance
    • Access Reviews
    • Entitlement Management
  • Support FERPA, cybersecurity, and audit compliance requirements.
  • Design logging, auditing, monitoring, and incident response integrations.

Required Qualifications

• 12+ years of enterprise IAM architecture experience.
• 8+ years of Microsoft Azure architecture experience.
• 5+ years of Microsoft Entra ID and Identity Governance experience.
• Hands-on experience leading at least two large-scale MIM/FIM modernization or replacement projects.
• Experience architecting cloud-native identity solutions in Azure.
• Experience integrating Azure services with enterprise HR, ERP, and Student Information Systems.

Technical Expertise

• Microsoft Identity Platform
  • Microsoft Entra ID
  • Entra Connect
  • Entra Cloud Sync
  • Entra ID Governance
  • Entra Provisioning Services
  • Conditional Access
  • Privileged Identity Management (PIM)
• Azure Platform
  • Azure Functions
  • Azure Logic Apps
  • Azure Automation
  • Azure Data Factory
  • Azure API Management
  • Azure SQL Database
  • Azure Storage Accounts
  • Azure Key Vault
  • Azure Monitor
  • Application Insights
  • Microsoft Sentinel
• Directory Services
  • Active Directory
  • AD LDS
  • Group Policy
  • Hybrid Identity Architectures
  • Exchange Online
• Development & Automation
  • PowerShell
  • Microsoft Graph API
  • REST APIs
  • JSON
  • CI/CD Pipelines
  • Infrastructure as Code (Bicep, ARM, or Terraform)

Preferred Skills

• Candidates should possess one or more of the following:
  • Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
  • Microsoft Certified: Cybersecurity Architect Expert (SC-100)
  • Microsoft Certified: Identity and Access Administrator Associate (SC-300)
  • Microsoft Certified: Azure Administrator Associate (AZ-104)
  • Microsoft Certified: Security Operations Analyst (SC-200)

Desired Candidate Profile

The ideal candidate is a senior Azure architect who combines deep cloud architecture expertise with hands-on MIM modernization experience. They should be capable of engaging with executive stakeholders, leading architecture decisions, mentoring delivery teams, and ensuring successful implementation of a secure, scalable, and future-ready identity platform.

Engagement Details

• Estimated Commitment: 30+ hours per week
• Duration: ~6 months (extension possible if awarded next phase)
• Reports to clients Project Manager
• Serves as Lead Azure Identity Architect and Technical Authority for the clients identity Modernization Program