Senior Azure Architect – IAM

Summary

We are seeking a highly experienced Senior Azure Architect specializing in Identity and Access Management (IAM) to lead the design, implementation, and governance of our cloud security infrastructure. In this pivotal role, you will be responsible for architecting robust identity solutions that align with the strategic goals of our IT Services division. The position demands a deep understanding of the Azure ecosystem, particularly in securing APIs, databases, and enterprise applications through advanced identity protocols. You will serve as a technical authority, ensuring seamless integration between complex systems such as Workday, Banner SIS, and various HR/ERP platforms while maintaining rigorous security standards and operational efficiency.

Responsibilities

• Design and deploy scalable IAM architectures utilizing Microsoft Entra ID and Microsoft Identity Manager (MIM), including the scripting and customization of identity workflows.
• Develop and manage Infrastructure as Code (IaC) strategies using Terraform, Bicep, and ARM templates to automate the provisioning of secure Azure resources.
• Implement comprehensive API security measures by configuring Azure API Management and integrating it with Azure SQL and Key Vault for secure data access.
• Establish and maintain advanced monitoring and threat detection frameworks leveraging Azure Monitor, Application Insights, and Microsoft Sentinel to ensure proactive security posture.
• Architect and govern CI/CD pipelines to enforce deployment security policies and streamline the release process across the organization.
• Lead the integration of identity solutions with external enterprise systems, specifically focusing on Workday, Banner SIS, and other HR/ERP platforms to ensure synchronized user data.
• Automate identity provisioning, synchronization, and lifecycle management processes through custom scripting and Azure automation tools.
• Provide technical leadership and mentorship to engineering teams regarding best practices in cloud security and identity architecture.

Requirements

Minimum of 10+ years of professional experience in IT Services, with a significant portion dedicated to cloud architecture and identity management. Proven expertise in Microsoft Azure services, specifically Azure API Management, Azure SQL, Key Vault, and the broader Microsoft Identity ecosystem. Advanced proficiency in Infrastructure as Code tools, including Terraform, Bicep, and ARM Templates, for managing cloud resources. Strong hands-on experience with observability and security tools such as Azure Monitor, Application Insights, and Microsoft Sentinel. Demonstrated capability in designing and managing CI/CD pipelines with a focus on deployment governance and security compliance. Extensive background in integrating Microsoft Identity Manager (MIM) and Microsoft Entra ID, including custom scripting and automation development. Experience in connecting identity solutions with enterprise resource planning systems, particularly Workday, Banner SIS, and HR/ERP integrations. Ability to design secure IAM architectures that support complex synchronization and provisioning requirements.