Azure IAM Architect

Azure IAM Architect

MS Azure Cloud Architect

Remote

Contract

Job Overview

The Microsoft Azure Cloud IAM Architect will lead the migration of identity and access management IAM solutions from SailPoint Identity Security Cloud to Microsoft Entra ID This role involves assessing existing SailPoint configurations designing migration strategies and implementing Entra IDbased identity governance solutions to ensure secure compliant and efficient identity management across hybrid and cloud environments

Key Responsibilities

Migration Planning and Assessment

Conduct a comprehensive analysis of existing SailPoint IdentityIQ or Identity Security Cloud configurations including users roles groups policies and workflows

Map SailPoint identity governance features eg provisioning access certifications to equivalent Microsoft Entra ID capabilities

oIdentify dependencies custom configurations and potential challenges in migrating from SailPoint to Entra ID

Solution Design and Architecture

Design migration strategies for transitioning identity data including users groups service principals and access policies to Entra ID

Architect Entra ID solutions leveraging Microsoft Graph APIs Azure RBAC and conditional access policies to replicate SailPoint functionality

Plan hybrid identity architectures ensuring seamless integration between onpremises Active Directory and Entra ID during migration

Migration Execution

Configure Microsoft Entra ID connectors and APIs to import identity data from SailPoint ensuring data integrity and consistency

Migrate user accounts group memberships and access policies including B2B guest users and B2C consumer identities to Entra ID

oImplement single signon SSO and multifactor authentication MFA in Entra ID to replace SailPoint SSO configurations

Transition cloud governance features such as Azure Management Objects eg Management Groups Subscriptions Resource Groups to Entra ID

Access Management and Governance

Configure Entra ID rolebased access control RBAC using builtin and custom roles to align with SailPoints access control model

Set up Entra ID Privileged Identity Management PIM for managing elevated access and replacing SailPoints privileged account management

Implement automated access reviews policy enforcement and compliance reporting in Entra ID to maintain governance standards

Testing and Validation

Perform endtoend testing of migrated identity data access policies and SSO configurations to ensure functionality and security

Validate migration outcomes against business requirements addressing discrepancies in user access or policy enforcement

Test hybrid identity synchronization using Azure AD Connect to ensure continuity between on premises and cloud environments

Compliance and Security

Ensure migrated configurations comply with organizational security policies and regulatory standards eg GDPR HIPAA SOC

Implement Entra ID security features such as conditional access riskbased policies and custom security attributes to enhance identity protection

Document migration processes and configurations for audit and compliance purposes

Stakeholder Collaboration and Training

Collaborate with security infrastructure and compliance teams to align migration plans with business objectives

Provide training and documentation to endusers and administrators on Entra ID features and workflows postmigration

Work with Microsoft and SailPoint support teams to resolve migrationrelated issues

PostMigration Optimization

Monitor Entra ID performance and address API rate limits or integration issues using best practices like exponential backoff

Optimize Entra ID configurations for scalability and efficiency ensuring alignment with long term IAM goals

Decommission SailPoint components postmigration ensuring a clean transition

Qualifications

Experience

5 years of experience in identity and access management IAM with expertise in SailPoint and Microsoft Entra ID

Proven experience in migrating IAM solutions preferably from SailPoint to Entra ID or similar platforms

Handson experience with Microsoft Graph APIs SCIM SAML and Azure AD Connect

Technical Skills

Deep knowledge of Microsoft Entra ID including RBAC PIM and conditional access policies

Proficiency in SailPoint IdentityIQ or Identity Security Cloud including connector configurations and governance features

Experience with PowerShell scripting REST APIs and JSON for identity data migration

Familiarity with Azure Management Objects and hybrid identity architecture

Certifications preferred

Microsoft Certified Identity and Access Administrator Associate

SailPoint Certified Identity Engineer or equivalent

Soft Skills

Strong analytical and problem-solving skills to address migration challenges

Excellent communication and stakeholder management abilities

Employers have access to artificial intelligence language tools (AI) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Report this job

Dice Id:

10330808

Position Id:

2025-89021