Identity Architect
Kforce Inc.

RESPONSIBILITIES:

Kforce has a client in Rock Hill, SC that is seeking an Identity Architect.Summary:In this role, the Identity Architect provides design, implementation and support of Microsoft's on-premises and cloud identity platforms including Microsoft Windows Active Directory, Entra ID, Intune, and Microsoft Active Directory Federation Services. The Identity Architect is also a subject matter expert in using GPO to implement security standards on Domain Controllers and Domain Member Servers. This hands-on position will lead the vision, architecture and strategy of the identity and access platforms. The ideal candidate will possess a strong IAM background with expertise in identity governance, AD, Entra ID, Conditional Access Policies, SSO, MFA, and ZTNA concepts such as Entra Global Secure Access(GSA).Responsibilities:

• Manages and architects enterprise solutions including, but not limited to Active Directory, Entra ID, Intune, M365 Enterprise Applications, Conditional Access Policies, RBAC, Application Authentication, and Identity Management
• Identify gaps in security, consult with cyber security, and implement protocols to reduce exposure and manage risk
• Prepare and deliver training and documentation to the Cyber, Infrastructure and Operations teams
• Adapt environment to new best practices and standards as they emerge
• Anticipates and mitigates potential attacks through close monitoring of access platforms and coordination with the cyber security team
• Promotes and contributes to the continuous improvement of the security strategy based on risk prioritization and business objectives
• Assist team with day-to-day management and troubleshooting including, but not limited to AD, Entra ID, GSA, DNS, DHCP, CA, and vulnerability management
• Responds to and resolves helpdesk tickets relevant to job duties
• Participates in project management activities, as assigned

REQUIREMENTS:

• Bachelor's degree in Information Systems or Computer Science
• One or more of the following: Microsoft Certified Cybersecurity Architect Expert, Microsoft Certified Azure Security Engineer, CIAM, Microsoft Identity and Access Administrator, Microsoft Certified Azure Administrator
• 9+ years of relevant experience in the IT field
• 9+ years of increasing responsibility architecting and delivering complex Active Directory and Entra ID hybrid solutions on a global scale
• Expert understanding of, but not limited to, major authentication/authorization platforms/standards including certificate authentication, password less authentication, ADFS, PIM, PAM, RADIUS, Hello, Multifactor authentication, conditional access, RBAC (role-based access control), Kerberos, and SAML
• Demonstrated expertise with architecting and administering a tiered active directory environment
• Strong experience with PowerShell scripting and automation
• Strong knowledge of Windows Server 2016, 2019, 2022, Linux
• Familiarity with data governance and compliance requirements
• A strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business architects, engineers, developers, application owners, service providers, and senior management
• Due to the requirements of this position, the selected incumbent must be qualified to access, and implement and maintain access restrictions on, Controlled Unclassified Information at restriction levels including NOFORN
• Project Management skills
• Excellent communication skills (written and verbal)
• Demonstrated ability to assume independent and team-based responsibilities
• A strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business architects, engineers, developers, application owners, service providers, and senior management
• Strong teamwork, interpersonal and customer service skills a must
• Highly organized

---