Cloud Platform Architect

A global financial institution is looking for a senior Cloud Platform Architect to take technical ownership of its Microsoft Entra and cloud identity environment.

For a complete understanding of this opportunity, and what will be required to be a successful applicant, read on.
This is a hands-on individual contributor opportunity for someone who understands identity as a platform capability rather than simply an administrative function. You will help mature an established enterprise identity estate while defining secure, reusable patterns for workforce, privileged, workload, and external identities.
The environment emphasizes automation, secure defaults, coded guardrails, and self-service patterns. Success requires someone who can make sound architecture decisions while remaining close enough to the technology to understand rollout risk, exceptions, production impact, and long-term operational support.
Responsibilities
Own architecture and continuous improvement across the Microsoft Entra environmentDesign and evolve Conditional Access, privileged-access, and entitlement controlsDefine hybrid identity patterns across synchronization, authentication, attribute flow, and cloud-only identitiesEstablish standards for managed identities, workload identity federation, service principals, and other non-human identitiesCreate reusable identity patterns through automation, scripting, Infrastructure as Code, and platform guardrailsDevelop architecture standards, reference designs, runbooks, and reusable implementation patternsPartner with Security, Risk, Compliance, Audit, Directory Services, application teams, and cloud engineeringSupport identity-control evidence and architecture discussions in a highly regulated environment
Role Requirements
7+ years of identity, cloud, or infrastructure engineering experienceDeep hands-on Microsoft Entra ID / Azure AD experience in an enterprise environmentStrong Conditional Access design experienceHands-on Privileged Identity Management experienceStrong hybrid identity knowledge, including Entra Connect, Azure AD Connect, or Cloud SyncExperience designing workload and non-human identity patternsWorking knowledge of OIDC, OAuth 2.0, SAML, MFA, and modern authenticationUnderstanding of Azure RBAC, Azure Policy, Key Vault, and identity integration across Azure servicesHands-on PowerShell and Microsoft Graph API experienceExperience operating in financial services or another comparably regulated enterpriseAbility to communicate technical architecture and risk clearly to engineering, security, and control stakeholders
xzbcwsv Nice to Have
Terraform or other Infrastructure-as-Code experienceEntra External ID experienceIdentity governance and Entitlement ManagementBreak-glass and privileged-access architectureBanking, capital markets, or insurance experience
How We Work
Senior architects remain technically credible and close to implementationIdentity controls are designed around automation and reusable patterns rather than manual approvalArchitecture decisions are evaluated for security, maintainability, supportability, and blast radiusThe role partners closely with Cloud Platform, Security, Risk, Compliance, Directory Services, and application teamsThe position follows a hybrid New York schedule of five onsite days across every ten business days