About the role

Senior Azure Identity & MIM Modernization
Architect

Position Summary
Seeking a highly experienced Senior Azure Identity & MIM Modernization Architect to provide
technical leadership. The architect will lead the design, governance, and implementation
oversight of clients transition from Microsoft Identity Manager (MIM) to a modern cloud-based
identity platform built on Microsoft Entra ID and Azure services.
This individual will serve as the primary technical authority for identity architecture, Azure
platform services, lifecycle management, security, automation, and enterprise integrations
across Workday, Banner, Active Directory, Exchange Online, AD LDS, Lenel, Genetec.
Key Responsibilities
Azure Architecture Leadership
● Design and govern enterprise-scale Azure identity and integration architectures.
● Lead adoption of Microsoft Entra ID, Identity Governance, Conditional Access, and Zero
Trust principles.
● Architect Azure-native solutions leveraging:
○ Azure Functions
○ Azure Logic Apps
○ Azure Automation
○ Azure Data Factory
○ Azure SQL Database
○ Azure Storage
○ Azure Key Vault
○ Azure Monitor
○ Azure Application Insights
○ Microsoft Sentinel
● Define high-availability, disaster recovery, monitoring, and operational support models.

MIM Assessment & Modernization
● Conduct detailed analysis of the current MIM environment, including:
○ Synchronization Rules

○ Metaverse Design
○ Management Agents
○ MPRs and Workflows
○ Custom Extensions
○ Provisioning Logic
● Develop migration and decommissioning strategy for MIM.

● Design cloud-native alternatives using Entra ID, Azure Automation, Logic Apps, and API-
driven integrations.

Identity & Access Management
● Design lifecycle management processes for:
○ Students
○ Faculty
○ Staff
○ Contractors
○ Alumni
● Implement RBAC and least-privilege access models.
● Design automated provisioning and deprovisioning workflows.
● Support identity governance, attestation, and access certification processes.
Enterprise Integration Architecture
● Lead architecture and integration strategy for:
○ Workday
○ Banner SIS
○ AD LDS
○ Lenel
○ Genetec
● Design event-driven and API-based provisioning architectures.
● Define data transformation and orchestration strategies.
Security & Compliance
● Implement and oversee:
○ Conditional Access Policies
○ Multi-Factor Authentication
○ Privileged Identity Management (PIM)
○ Identity Governance
○ Access Reviews
○ Entitlement Management
● Support FERPA, cybersecurity, and audit compliance requirements.
● Design logging, auditing, monitoring, and incident response integrations.

Required Qualifications
Experience
● 12+ years of enterprise IAM architecture experience.
● 8+ years of Microsoft Azure architecture experience.
● 5+ years of Microsoft Entra ID and Identity Governance experience.
● Hands-on experience leading at least two large-scale MIM/FIM modernization or
replacement projects.
● Experience architecting cloud-native identity solutions in Azure.
● Experience integrating Azure services with enterprise HR, ERP, and Student Information
Systems.
Technical Expertise
Strong hands-on experience with:
Microsoft Identity Platform
● Microsoft Entra ID
● Entra Connect
● Entra Cloud Sync
● Entra ID Governance
● Entra Provisioning Services
● Conditional Access
● Privileged Identity Management (PIM)
Azure Platform
● Azure Functions
● Azure Logic Apps
● Azure Automation
● Azure Data Factory
● Azure API Management
● Azure SQL Database
● Azure Storage Accounts
● Azure Key Vault
● Azure Monitor
● Application Insights
● Microsoft Sentinel
Directory Services
● Active Directory
● AD LDS

● Group Policy
● Hybrid Identity Architectures
● Exchange Online
Development & Automation
● PowerShell
● Microsoft Graph API
● REST APIs
● JSON
● CI/CD Pipelines
● Infrastructure as Code (Bicep, ARM, or Terraform)
Preferred Microsoft Certifications
Candidates should possess one or more of the following:
● Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
● Microsoft Certified: Cybersecurity Architect Expert (SC-100)
● Microsoft Certified: Identity and Access Administrator Associate (SC-300)
● Microsoft Certified: Azure Administrator Associate (AZ-104)
● Microsoft Certified: Security Operations Analyst (SC-200)
Desired Candidate Profile
The ideal candidate is a senior Azure architect who combines deep cloud architecture expertise
with hands-on MIM modernization experience. They should be capable of engaging with
executive stakeholders, leading architecture decisions, mentoring delivery teams, and ensuring
successful implementation of a secure, scalable, and future-ready identity platform.
Engagement Details

● Estimated Commitment: 30+ hours per week
● Duration: ~6 months (extension possible if awarded next phase)
● Reports to clients Project Manager
● Serves as Lead Azure Identity Architect and Technical Authority for the clients identity
Modernization Program