Identity Architect - Identity & Directory Services (Remote or In Office)

FocusPoint is partnering with a large, multi site enterprise to identify an experienced Identity Architect who will lead the strategy, design, and governance of the organization s identity and directory services. This role is ideal for a senior level identity professional who thrives in complex environments spanning corporate IT, industrial operations, and modern cloud platforms.

The Identity Architect will shape the enterprise identity roadmap, modernize hybrid identity services, and ensure secure, resilient authentication across a diverse technology landscape. This position requires deep expertise in Microsoft identity ecosystems, Zero Trust principles, and enterprise scale directory architecture.

• Develop and maintain enterprise identity architecture, standards, and long term strategy.

• Design secure Active Directory forest, domain, trust, and OU architectures.

• Govern Microsoft Entra ID (Azure AD), hybrid identity, and identity lifecycle management.

• Architect modern authentication solutions including MFA, passwordless, Conditional Access, Windows Hello for Business, SSO, OAuth, SAML, and OpenID Connect.

• Establish directory governance, naming standards, and identity modernization roadmaps.

• Provide architectural guidance across:

  • Active Directory Domain Services

  • DNS

  • Group Policy

  • Certificate Services / PKI

  • LDAP / Kerberos / NTLM reduction

  • Replication, RODCs, and secure delegation

• Partner with IAM teams to design secure privileged access models (PAWs, tiering, JIT, JEA, PIM, PAM).

• Define identity boundaries between IT and OT; support secure identity services for industrial environments.

• Lead identity architecture reviews and evaluate emerging identity technologies.

• Ensure alignment with enterprise security frameworks (NIST CSF, ISA/IEC 62443, SOX, CIS Controls).

• Collaborate closely with Infrastructure, Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, OT teams, and application owners.

• Bachelor s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent experience.

• 8+ years designing and administering enterprise Microsoft Active Directory environments.

• 3+ years designing enterprise identity architecture.

• Experience with multi domain and multi forest AD environments.

• Strong background in Microsoft Entra ID (Azure AD), hybrid identity, and Entra/Azure AD Connect.

• Experience implementing identity security best practices and supporting enterprise PKI.

• PowerShell automation experience.

• Experience supporting highly available identity infrastructure.

• Experience integrating enterprise applications with identity platforms.

• Experience supporting Operational Technology (OT) environments is a plus.

• Microsoft Certified: Identity and Access Administrator Associate (SC 300)

• Microsoft Certified: Azure Solutions Architect Expert

• Microsoft Certified: Azure Security Engineer Associate (AZ 500)

• Microsoft Certified: Windows Server Hybrid Administrator Associate

• Microsoft Certified: Cybersecurity Architect Expert (SC 100)

• CISSP

• Highly available, resilient identity infrastructure.

• Secure adoption of modern authentication and passwordless technologies.

• Reduced identity related security risks and privileged access exposure.

• Standardized AD and Entra ID architectures across the enterprise.

• Strong alignment with Zero Trust identity principles.

• Clean audit results with minimal identity related findings.

• Effective modernization of hybrid identity services and governance.

Why Work with FocusPoint
As a trusted staffing partner to industry-leading companies, FocusPoint provides access to roles that align with your professional goals, and we advocate for your success throughout the recruitment process. Our team understands appropriate skillsets and takes a consultative approach ensuring that each match is grounded in both experience and fit.

How to Apply
To ensure confidentiality and alignment with our client s hiring process, all applications must be submitted through FocusPoint. Please do not attempt to contact the client directly. Interested candidates should reach out to FocusPoint s recruitment team with any questions.