Security Architect - AD/Entra ID (Remote in the US)

GuidePoint Security LLC

United States

Full Time

Posted 26 days ago

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are seeking a highly experienced Security Architect (AD/Entra ID) to join our dynamic team and lead our identity and access management initiatives. The Security Architect will be responsible for the scope, assessment, design, testing, and technical documentation for the implementation, support, and security of identity solutions. The Security Architect will possess and maintain expertise in Microsoft Azure AAD (Entra) and Active Directory platforms utilizing the knowledge to address business requirements.

About the Active Directory/Entra ID Practice

Our team focuses on Securing Microsoft Identities, which includes both on-prem Active Directory and Entra ID. We partner with other Identity teams, threat assessment teams, and Cloud Security teams to cover IGA, PAM, IAM, AM, pen testing, and all areas within Microsoft on-prem AD and Entra ID.

Active Directory and Entra ID Security Assessments and Remediations
Active Directory Engineering (Domain consolidations, mergers and acquisitions, domain designs, Group Policy, CIS benchmarks, etc.)
Entra ID Identity design, troubleshooting, implementation

Roles and Responsibilities:

Lead the evaluation, design, and development of Active Directory & Azure Active Directory technical requirements, solutions, and implementation roadmap to ensure functional, reliable, secure, and cost-effective technology environment.
Develop and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
Ensure continuous improvement within the IAM security architecture by introducing and implementing emerging security technologies and practices.
Provide to global project and operational teams technical advice, guidance, expertise, and risk analysis on your area of expertise.
Translate requirements into an Architectural design and influence the deployment of key infrastructure components.
Maintain a thorough understanding of existing and emerging Microsoft Entra ID and related core technologies.
Analyze current Azure Active Directory environment to identify both technical and operational challenges while making recommendations and developing solutions for improvement.
Maintain and optimize on-premises Active Directory (AD) infrastructure, including DNS, GPOs, and domain controllers.
Participate in or lead complex or high severity troubleshooting and incident/problem resolutions with other infrastructure teams.
Evaluate and ensure the resolution of technically complex security issues, internal control issues, critical incidents and/or crisis resolution management, escalating as necessary.
Implement and enforce Multi-Factor Authentication (MFA) and security best practices across user accounts and devices.
Develop and manage integrations using the Microsoft Graph API for automation and custom applications, enabling advanced capabilities across Microsoft 365 services.
Create custom scripts to automate administrative tasks and data retrieval from the Graph API, enhancing operational efficiency.
Write and maintain Advanced PowerShell scripts to automate user and resource provisioning, reporting, and service configurations across Entra ID and Active Directory.
Implement and maintain security best practices.

Required Experience and Education:

10+ years of relevant working experience in IT Security and IT Architecture
7+ years of experience with Active Directory architecture and infrastructure, with an in-depth understanding of Active Directory Replication, DNS, Site Links, Site Topology, Group Policy, Global Catalogs, and other core infrastructure components.
3+ years of experience with Azure Active Directory architecture and design
5+ years of experience with Identity and Access Management (IAM) processes and technologies
Proven expertise in designing and implementing IAM solutions in complex environments.
Expertise in managing Azure AD/Entra, including Conditional Access, MFA, security best practices, hybrid environments, GPO's, On-Premises Active Directory Migrations and Azure AD Connect.
Experience with Microsoft Graph API for data retrieval and automation across Azure AAD.
In-depth knowledge of identity governance, authentication, authorization, and federation. Including MFA, SSO and PAM
Understanding of federation technologies (WS-Fed, OAuth, SAML, etc.)
Enterprise/Domain Admin and/or Azure Global Admin responsibilities
Proven knowledge in managing Active Directory 2016/2019/2022 infrastructure for the Enterprise.
Strong experience in PowerShell and Microsoft Graph API is required.
Knowledgeable of Microsoft Security Stack: Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention and Compliance Center Experience including – Litigation Hold, Retention, and eDiscovery.
Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Relevant certifications such as CISSP, CISM, or Microsoft Certified: Identity and Access Administrator Associate are considered an asset.

Travel Requirements:

Up to 10% travel

Physical Requirements:

Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays and a Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option

Originally posted on Himalayas

Principal Architect - Identity, Access, and Management

Lumen Technologies

United States

Full Time

Posted 29 days ago

Lumen is the trusted network for the AI‑powered world, connecting people, data, and applications through our expansive fiber network and connected ecosystem. We enable secure, high‑performance connectivity across cloud, edge, and AI workloads for enterprises, governments, and communities.

At Lumen, you’ll work on infrastructure customers rely on today and build for what’s next, where performance, security, and resilience matter.

This is a high accountability environment where bold ideas drive real innovation for our customers, partners, and industry. The work is challenging, expectations are clear, and trust is built into how we operate. If you’re ready to take ownership, deliver meaningful impact, and help shape the future of AI‑ready connectivity, join us today.

The Role

Define and own identity, access management, and security architecture for Lumen's NaaS platform,
customer-facing digital services, and AI/agent ecosystems. This role embeds security architecture directly
into the Digital Journey Architecture and Solutions organization - providing the team with IAM and security
expertise at the point of design, not as a downstream review function.The scope spans customer portal identity (who can access what and how), API security and authentication standards (OAuth2, OIDC, SAML), SSO integration (including Entra B2C for enterprise and government customers), FedRAMP and compliance-aligned security architecture, and the emerging security
requirements of agentic AI systems. This role also serves as the primary DJAS interface for security
architecture related to complex multi-cloud networking integrations and Lumen's public sector initiatives.

Location

This is a remote opportunity open to candidates located anywhere in the U.S.

The Main Responsibilities

Own IAM strategy and target-state architecture across Lumen's NaaS identity ecosystem:
LIAM/ECAPS, Microsoft Entra ID/B2C, AWS IAM.
Design and operationalize Zero Trust identity principles: continuous verification, risk-based access,
least privilege enforcement.
Architect customer identity and access management (CIAM): web portal, mobile, and API access
patterns with security and customer experience in balance.
Define authentication and federation standards: OAuth 2.0, OpenID Connect, SAML - enforced across
APIs and customer-facing surfaces.
Design SSO architecture across NaaS portal, partner portals, and government-facing services (Entra
B2C).
Develop IAM governance frameworks: RBAC/ABAC models, access lifecycle, entitlement review, audit
evidence.
Define IAM-as-Code practices: Terraform-based identity configuration, version-controlled, auditable
Architect security for agentic AI systems: agent authentication, authorization boundaries, audit trails for
AI-generated actions, token lifecycle management for agents.
Provide security architecture for FedRAMP-aligned government initiatives: boundary preservation,
tokenization patterns, identity flow compliance.
Serve as the embedded DJAS security architect for multi-cloud networking integration: define IAM and
security boundary requirements across cloud-to-cloud and cloud-to-physical network interconnects
Conduct security architecture reviews on NaaS designs: threat modeling, attack surface analysis,
risk-based recommendations.
Define security NFRs for DJAS architecture work: what every design must address from a security
perspective regardless of work type.
Partner with Lumen's Security team (not owned by DJAS) and bring the security perspective into DJAS
design work proactively.

What We Look For in a Candidate

Bachelor's degree in computer science, engineering, information security, or related field with 12+
years of relevant experience or
Master's degree with 10+ years of relevant experience
AI-first practitioner - actively integrates AI tools (LLMs, coding assistants, AI-powered analysis and
design tools) as a routine part of architecture and engineering work, not as an occasional experiment.
Candidates must demonstrate specific, current examples of how AI has meaningfully accelerated or
improved their work.
CISSP, CISM, or equivalent security certification preferred
Deep expertise in enterprise IAM architecture: Microsoft Entra ID/Azure AD, AWS IAM - production
scale
Expert knowledge of OAuth 2.0, OpenID Connect, and SAML - not just implementation but architecture
and standards governance
Customer identity (CIAM) experience: portal, mobile, and API access patterns
Zero Trust architecture principles and implementation experience
RBAC/ABAC model design at enterprise scale
FedRAMP, FISMA, or NIST 800-53 compliance architecture experience
Security architecture for API ecosystems: API gateway security, token management, key rotation,
scope enforcement
Threat modeling disciplines (STRIDE or equivalent)

Preferred:

Experience securing agentic AI systems or autonomous workflow platforms
Microsoft Entra B2C (government/B2C federated identity) experience
Experience with multi-cloud networking security or cloud-to-physical network security boundaries
(SD-WAN, SASE, network security gateways)
PAM (Privileged Access Management) architecture experience
IAM-as-Code: Terraform-based identity configuration management
Government/Public Sector cloud security architecture experience (GovCloud, FedRAMP
High/Moderate)
Understanding of compliance frameworks across multiple regulators: ISO 27001, SOC 2, PCI-DSS,
GDPR

Compensation

This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.

Location Based Pay Ranges

$152,066 - $202,755 in these states: AL AR AZ FL GA IA ID IN KS KY LA ME MO MS MT ND NE NM OH OK PA SC SD TN UT VT WI WV WY
$159,670 - $212,893 in these states: CO HI MI MN NC NH NV OR RI
$167,273 - $223,031 in these states: AK CA CT DC DE IL MA MD NJ NY TX VA WA

Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process.

Learn more about Lumen's:Benefits

Bonus Structure

Requisition #: 343196

Life at Lumen

Life at Lumen is human and connected, even in a fast moving, AI‑focused organization. We set clear expectations and trust people to meet them. With real support and shared accountability, teams collaborate better, move faster, and deliver meaningful outcomes.

Our Lumen 8 behaviors guide how we interact, make decisions, and work together, shaping a culture built to perform and win.

To learn more about Life at Lumen and how we live the Lumen 8, please visit:

Background Screening

If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. For more information on these checks, please refer to the Post Offer section of our FAQ page. Job-related concerns identified during the background screening may disqualify you from the new position or your current role. Background results will be evaluated on a case-by-case basis.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Equal Employment Opportunities

We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, “protected statuses”). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training.

Privacy Notice

Lumen is committed to protecting the privacy and security of personal information collected during the recruitment and hiring process. Our Applicant Privacy Notice explains how we collect, use, disclose, and protect applicant information, as well as how individuals may request access to or deletion of their personal data.

To review Lumen’s Global Employment Applicant and Talent Community Privacy Notice, please visit:

Disclaimer

The job responsibilities described above indicate the general nature and level of work performed by employees within this classification. It is not intended to include a comprehensive inventory of all duties and responsibilities for this job. Job duties and responsibilities are subject to change based on evolving business needs and conditions.

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Please be advised that Lumen does not require any form of payment from job applicants during the recruitment process. All legitimate job openings will be posted on our official website or communicated through official company email addresses. If you encounter any job offers that request payment in exchange for employment at Lumen, they are not for employment with us, but may relate to another company with a similar name.