Job Title: Senior Azure Architect – MIM Modernization & Microsoft Entra ID Experience: 10+ Years Work Mode: Remote Contract Duration: 6 Months (Extendable) Shift Timing: IST Availability: Immediate Joiners Preferred Project: Enterprise Identity Modernization Job Overview We are looking for a highly experienced Senior Azure Architect specializing in Identity and Access Management (IAM) to lead the modernization of an enterprise identity platform from Microsoft Identity Manager (MIM) to Microsoft Entra ID and Azure-native services. The ideal candidate must have strong hands-on experience in end-to-end identity implementation, large-scale identity migration, MIM scripting, Entra ID automation, PowerShell, and enterprise system integrations. Candidates must be capable of independently designing and implementing complex identity solutions, troubleshooting synchronization issues, and leading architecture decisions. Important: Candidates with only production support or maintenance experience will not be considered. Strong hands-on implementation and migration experience is mandatory. Key Responsibilities 1. Azure Identity Architecture - Design and implement enterprise-scale IAM solutions using Microsoft Entra ID and Azure services. - Lead the transition from MIM to modern cloud-based identity management. - Design hybrid identity architectures integrating on-premises Active Directory with Microsoft Entra ID. - Implement SSO, MFA, Conditional Access, RBAC, and Privileged Identity Management (PIM). - Define identity governance, access reviews, and automated provisioning and deprovisioning processes. 2. MIM Modernization and Migration - Assess existing MIM environments, including synchronization rules, metaverse design, management agents, workflows, provisioning logic, and custom extensions. - Develop and execute migration strategies from MIM to Microsoft Entra ID and Azure-native identity solutions. - Perform MIM scripting, customization, troubleshooting, and synchronization analysis. - Develop automated identity provisioning workflows using PowerShell, Microsoft Graph API, Azure Automation, and Logic Apps. - Troubleshoot synchronization failures, attribute mismatches, certificate issues, URL configuration problems, and identity reconciliation errors. - Handle complex identity scenarios, including multiple roles or identities associated with a single individual. 3. Entra ID Scripting and Automation - Develop and maintain PowerShell scripts for identity lifecycle management, provisioning, synchronization, and access control. - Automate identity administration using Microsoft Graph API and REST APIs. - Implement onboarding, role changes, transfers, and offboarding workflows. - Design automation for identity governance, access reviews, and entitlement management. - Implement error handling, logging, monitoring, and exception management. 4. Enterprise Application Integration - Design and implement identity integrations with enterprise systems, including: - Workday - Banner Student Information System (SIS)



- Active Directory and AD LDS - Exchange Online - Lenel and Genetec physical access systems - Implement application onboarding using SAML, OAuth 2.0, and OpenID Connect (OIDC). - Develop API-based integrations for identity synchronization and provisioning. - Support integrations with physical access control systems, biometric authentication, and ID card management. - Troubleshoot integration issues involving attributes, authentication, certificates, endpoints, and synchronization. 5. Security and Compliance - Implement MFA, SSO, Conditional Access, RBAC, PIM, and least-privilege access controls. - Apply Zero Trust security principles and just-in-time (JIT) privileged access practices. - Configure identity governance, entitlement management, access reviews, and audit logging. - Support IP-based access restrictions and IP whitelisting where required. - Integrate logging, monitoring, and security incident processes with Microsoft Sentinel. 6. Azure Platform and Governance - Architect solutions using Azure Functions, Logic Apps, Azure Automation, API Management, Azure SQL Database, Storage Accounts, and Key Vault. - Implement monitoring using Azure Monitor and Application Insights. - Define high availability, disaster recovery, and operational support strategies. - Apply Infrastructure as Code (IaC) practices using Bicep, ARM templates, or Terraform. - Support CI/CD pipelines and deployment governance. Mandatory Technical Skills - 10+ years of overall IT experience, with strong Azure architecture and IAM expertise. - Microsoft Identity Manager (MIM) scripting and customization. - Microsoft Entra ID scripting and automation. - Strong PowerShell scripting and troubleshooting skills. - Microsoft Entra Connect and/or Entra Cloud Sync. - Active Directory and hybrid identity architecture. - Identity provisioning, synchronization, and lifecycle management. - Microsoft Graph API and REST API integrations. - SAML, OAuth 2.0, OIDC, SSO, MFA, RBAC, and Conditional Access. - MIM-to-Entra ID modernization or equivalent identity platform migration experience. - Complex identity resolution, attribute mapping, and synchronization troubleshooting. Client's Mandatory Pre-Screening Criteria Candidates must demonstrate the following experience: 1. End-to-End Implementation: Delivered ground-up identity implementations or modernization projects, not just production support or maintenance. 2. Large-Scale Migration: Experience with large-scale migrations, ideally involving 10,000+ user accounts. 3. Complex Identity Scenarios: Experience handling multiple roles, dual identities, or multiple IDs associated with one individual. 4.



Application Onboarding: Hands-on enterprise application onboarding using SAML and OIDC, with knowledge of RBAC, SSO, MFA, and Conditional Access. 5. External System Integration: Experience integrating identity platforms with HR, ERP, or student information systems. Workday and Banner integrations are highly desirable. 6. Synchronization Troubleshooting: Ability to independently resolve attribute mismatches, synchronization failures, certificate issues, endpoint URL problems, and provisioning errors. 7. Security and Access Management: Experience implementing JIT access, Conditional Access, MFA, SSO, and IP-based access restrictions. 8. Complex Edge Cases: Ability to handle exceptions and non-standard identity scenarios, including approximately 10% complex accounts requiring advanced troubleshooting and customized identity handling. Preferred Certifications - Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Microsoft Certified: Cybersecurity Architect Expert (SC-100) - Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Microsoft Certified: Azure Administrator Associate (AZ-104) - Microsoft Certified: Security Operations Analyst (SC-200) Ideal Candidate Profile The ideal candidate combines senior-level Azure architecture expertise with deep hands-on experience in MIM scripting, Microsoft Entra ID automation, identity migration, and enterprise integrations. The candidate must be capable of independently handling complex technical challenges, designing scalable identity solutions, collaborating with stakeholders, and leading implementation activities. Priority will be given to candidates with successful end-to-end identity modernization projects, large-scale migration experience, strong PowerShell scripting, and practical troubleshooting expertise. How to Apply Interested candidates should share their updated resumes highlighting relevant Azure IAM, MIM scripting, Entra ID automation, migration, and enterprise integration experience. Please include the following details with your application: - Total experience and relevant Azure IAM experience - MIM scripting and Entra ID scripting experience - MIM-to-Entra ID migration experience and largest migration size - End-to-end implementation project details - PowerShell and Microsoft Graph API experience - Workday, Banner, or other enterprise integration experience - Current location and notice period - LinkedIn profile Contact Details Email: [email protected] WhatsApp: +91-XXXXXXXXXX

Application Question(s):

- Do you have hands-on experience implementing or migrating Microsoft Identity Manager (MIM) to Microsoft Entra ID? If yes, what was the largest migration you handled in terms of user accounts?
- Do you have solid hands-on experience with MIM scripting, Microsoft Entra ID scripting, and PowerShell, including end-to-end implementation and complex identity synchronization troubleshooting (not just production support)?

Work Location: Remote

📌 Senior Azure Architect – MIM Modernization & Microsoft Entra ID (India)
🏢 Achutha Associates
📍 India