We are seeking an experienced Azure Architect specializing in Identity and Access Management (IAM) to lead enterprise-scale identity modernization initiatives. The ideal candidate will have extensive experience in Microsoft Identity Manager (MIM/FIM), Microsoft Entra ID, hybrid identity architectures, and large-scale identity migrations. The candidate must have hands-on experience designing and implementing end-to-end identity solutions, modernizing legacy identity platforms, automating identity lifecycle processes, and integrating enterprise applications and external systems through API-based architectures.

Key Responsibilities
• Lead end-to-end architecture, design, and implementation of enterprise-scale Azure and Microsoft identity solutions.
• Drive MIM/FIM modernization or replacement initiatives, including assessment, migration planning, implementation, and decommissioning.
• Design and implement large-scale identity migrations, ideally involving 10,000+ user accounts.
• Develop and maintain MIM scripts and Entra ID automation using PowerShell, Microsoft Graph API, and REST APIs.
• Design hybrid identity solutions integrating on-premises Active Directory with Microsoft Entra ID.
• Implement automated identity provisioning, deprovisioning, synchronization, and lifecycle management.
• Configure and manage Conditional Access, MFA, Privileged Identity Management (PIM), RBAC, access reviews, and entitlement management.
• Design and implement SSO and application onboarding using SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Integrate identity platforms with enterprise applications, HR systems, ERP platforms, and Student Information Systems.
• Develop API-based integrations with systems such as Workday, Banner SIS, AD LDS, Lenel, and Genetec.
• Troubleshoot complex identity synchronization issues, including attribute mismatches, certificate and URL issues, and synchronization service failures.
• Implement security controls aligned with Zero Trust, least-privilege access, just-in-time (JIT) access, and enterprise security policies.
• Establish monitoring, logging, auditing, incident response,



and operational support processes.
• Collaborate with security, infrastructure, application, and business teams to deliver secure and scalable identity solutions. Required Technical Skills1. Azure Architecture
• 8+ years of Azure architecture experience.
• Experience designing enterprise-scale cloud-native solutions.
• Knowledge of high availability, disaster recovery, monitoring, and operational support.
• Hands-on experience with Azure Functions, Logic Apps, Automation, API Management, Azure SQL Database, Storage Accounts, Key Vault, Azure Monitor, Application Insights, and Microsoft Sentinel. 2. Identity and Access Management
• 12+ years of enterprise IAM architecture experience, as specified in the role requirements.
• At least 5 years of experience with Microsoft Entra ID and Identity Governance.
• Strong hands-on experience with Microsoft Identity Manager (MIM), Forefront Identity Manager (FIM), and identity synchronization.
• Proven experience leading at least two large-scale MIM/FIM modernization or replacement projects.
• Mandatory hands-on MIM scripting and Entra ID scripting experience.
• Expertise in Microsoft Entra Connect, Entra Cloud Sync, Entra ID Governance, and Entra Provisioning Services. 3. Directory Services and Hybrid Identity
• Strong knowledge of Active Directory, AD LDS, Group Policy, Exchange Online, and hybrid identity architectures.
• Experience with directory synchronization, identity federation, and complex identity scenarios.
• Ability to manage multiple roles or identities associated with a single individual. 4. Identity Security and Governance
• Experience implementing MFA, SSO, Conditional Access, PIM, RBAC, access reviews, entitlement management, and identity attestation.




• Solid understanding of Zero Trust principles and least-privilege access.
• Experience with just-in-time access and IP-based access restrictions.
• Knowledge of cybersecurity, compliance, audit logging, and incident response. 5. Development and Automation
• Strong PowerShell scripting skills for MIM and Entra ID.
• Experience with Microsoft Graph API, REST APIs, and JSON.
• Knowledge of CI/CD pipelines and Infrastructure as Code using Bicep, ARM templates, or Terraform.
• Ability to automate provisioning, deprovisioning, synchronization, and identity governance workflows. 6. Enterprise Integrations
• Experience integrating identity platforms with Workday, Banner SIS, HR systems, ERP platforms, and Student Information Systems.
• Familiarity with AD LDS and physical access control systems such as Lenel and Genetec.
• Experience implementing event-driven and API-based integrations.
• Knowledge of SAML, OAuth 2.0, OIDC, and application onboarding protocols. Mandatory Experience and Evaluation CriteriaCandidates must demonstrate:
• End-to-end identity implementation experience, not just production support or maintenance.
• At least two large-scale MIM/FIM modernization or replacement projects.
• Hands-on MIM scripting and Entra ID scripting.
• Large-scale identity migration experience, preferably involving 10,000+ accounts.
• Experience troubleshooting complex synchronization and provisioning scenarios.
• Ability to handle multi-role identities, dual-ID scenarios, and complex identity lifecycle requirements.
• Experience integrating enterprise applications and external systems through APIs.
• Strong understanding of identity security, governance, and access control. Preferred Qualifications
• Microsoft certifications such as AZ-305, SC-100, SC-300, AZ-104, or SC-200.
• Experience in enterprise identity modernization and cloud security transformation.
• Knowledge of FERPA and other relevant compliance requirements, particularly in education-related environments.

📌 Azure Architect – Identity (Gurugram)
🏢 Cibronix Software
📍 Gurugram