Senior Azure Architect – Identity & Endpoint Engineer

Role Overview

The Senior Azure Architect Identity & Endpoint Engineer designs, implements, and manages enterprise identity and endpoint services within Microsoft Azure. This role serves as the technical authority for identity, access, and endpoint configuration services across cloud and hybrid environments.

*This position is contingent upon contract award.*

Responsibilities

• Design, implement, and maintain enterprise identity architectures within Microsoft Azure, supporting secure authentication, authorization, and access management across cloud and hybrid environments.
• Serve as the technical authority for identity and access management (IAM) solutions, including Microsoft Entra ID (Azure AD), ADFS, and hybrid identity integrations.
• Architect and manage endpoint engineering and device management solutions, leveraging Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune.
• Define and enforce identity and endpoint standards, policies, and configurations to ensure consistency, security, and scalability across the enterprise.
• Design and support identity federation, single sign-on (SSO), conditional access, and authentication flows across enterprise systems.
• Integrate identity and endpoint services with Azure-hosted workloads and on-premises infrastructure.
• Collaborate with Information Assurance and cybersecurity teams to design and implement security controls related to identity, access, and endpoint management.
• Support compliance, audit, and authorization activities by providing architecture documentation, control mappings, and technical guidance.
• Lead troubleshooting and resolution of complex identity and endpoint issues, including authentication failures, access problems, and device compliance issues.
• Evaluate and recommend improvements to identity and endpoint architectures, balancing security, usability, and operational impact.
• Guide system and platform engineers on identity integration patterns and endpoint management best practices.
• Maintain authoritative architecture diagrams, standards, and technical documentation for identity and endpoint services.
• Support lifecycle activities for identity and endpoint platforms, including upgrades, migrations, and modernization efforts.
• Participate in strategic planning and technical reviews to ensure identity and endpoint services align with enterprise architecture and mission needs.

Requirements

• Experience: Minimum 4 years of relevant experience with significant depth in identity and endpoint engineering.
• Education: Bachelor’s degree in IT, Cybersecurity, or a related field, or an equivalent combination of education, training, and experience.
• Security Clearance: Active Secret clearance.
• Azure Expertise: Proven experience managing identity services within Microsoft Azure.
• Technical Proficiency: Expertise in Microsoft Entra ID (Azure AD), ADFS, hybrid identity architectures, Microsoft Endpoint Configuration Manager (MECM / SCCM), and Microsoft Intune.
• Certifications:
  • Microsoft Certified: Azure Administrator Associate or higher.
  • Must meet DoD 8570 / 8140 IAT-II requirements (e.g., Security+, SSCP, GSEC).