Apply on Employer Site

Formula5 · 4 weeks ago

Senior Tech Lead – Identity & Access Management (Microsoft Entra ID / Azure AD)

United States

Full-time

Remote

Senior Level, Lead/Staff

Formula5 is a Microsoft Partner focused on Security, Identity, and Data and AI. They are seeking a Senior Tech Lead in Identity and Access Management to shape and govern modern identity solutions across hybrid cloud environments.

Information Technology & Services

Responsibilities

Architect and implement access governance in Microsoft Entra ID using PIM, Conditional Access, Entitlement Management, and Azure RBAC with proper group lifecycle practices

Design secure integration patterns for applications that still rely on classic AD groups, including hybrid group strategies, group writeback, and migration planning

Own the full identity lifecycle, including provisioning, de-provisioning, access reviews, and governance workflows

Lead modernization work to replace legacy AD group usage with Entra ID native controls and enforce least privilege across Azure and on-prem environments

Define, implement, and automate group management policies such as naming standards, ownership rules, expiration, and dynamic membership

Integrate Entra ID with SaaS platforms using SCIM or custom provisioning patterns

Act as a Level 3 escalation point for complex identity incidents and operational challenges

Mentor junior engineers and promote secure identity practices across teams

Produce documentation including architecture decisions, runbooks, and governance standards

Qualification

Microsoft Entra IDIdentityAccess ManagementAzure RBACPowerShellHybrid Identity EnvironmentsPIMConditional AccessEntitlement ManagementTerraformMicrosoft Graph APILDAPOAuth2OpenID ConnectSAMLKerberos/NTLMGPOs

Required

Strong experience in identity and access management with hands-on expertise in Microsoft Entra ID at enterprise scale

Proven experience running hybrid identity environments with Entra Connect, cloud sync, health monitoring, sync rules, and group writeback

Deep knowledge of PIM, Conditional Access, Entra ID Governance, Access Reviews, Entitlement Management, and Azure RBAC

Experience with dynamic groups, administrative units, and scoped policies

Strong automation skills using PowerShell and Microsoft Graph API; Terraform, ARM, or Bicep is a plus

Experience supporting or migrating applications reliant on traditional on-prem AD security groups

Solid understanding of on-prem Active Directory structures, LDAP, GPOs, and hybrid identity challenges

Familiarity with identity standards including OAuth2, OpenID Connect, SAML, and Kerberos/NTLM

Preferred

Microsoft certifications such as Identity and Access Administrator Associate, Enterprise Administrator Expert, Solutions Architect Expert, or Cybersecurity Architect Expert

Experience with Azure Landing Zones or Cloud Adoption Framework identity governance

Background in tech lead or architect roles on identity transformation projects

Exposure to tools like SailPoint, Saviynt, Okta, Ping, or CyberArk PAM