Senior Identity Security Specialist (Enterprise Ac

ENVIRONMENT

A growing provider of cutting-edge Custom Cloud Solutions seeks an experienced Senior Identity Security Specialist to join its InfoSec team on a long-term contract basis. This role is designed for an InfoSec practitioner who views Identity as the primary security perimeter. You will bridge the gap between traditional infrastructure / AD environments and modern Microsoft Entra ID cloud security. Rather than functioning as a pure technical sysadmin, you will own the identity threat surface—proactively identifying security risks, designing architectural controls, and driving governance across complex, enterprise-scale environments.

DUTIES

Identity Architecture & Tiering Governance –

·        Drive the evolution and enforcement of identity privilege models, moving legacy environments from traditional AD Tiering (Tier 0/1/2), Red Forest / Bastion models, and Delegation of Control Frameworks toward Microsoft’s modern Enterprise Access Model (EAM).

Entra ID & Hybrid Identity Security –

·        Lead security strategy and enforcement across Microsoft Entra ID (Azure AD) and on-premises Active Directory.

·        Oversee Enterprise Application registrations, service principal permissions, consent frameworks, and tenant-wide security boundaries.

Modern Authentication & Passwordless Adoption –

·        Architect, refine, and enforce passwordless authentication paths, including Windows Hello for Business (WHfB), Passkeys (FIDO2), and robust Conditional Access/MFA policies.

Access Delegation & Control –

·        Audit, redesign, and maintain strict delegation models across hybrid environments to eliminate privilege creep, lateral movement paths, and over-provisioned administrative accounts.

Autonomous Security Ownership –

·        Independently scan the environment for identity security gaps, misconfigurations, and governance blind spots. Define solutions and execute remediations with minimal oversight.

Cross-Team Collaboration –

·        Act as an authoritative InfoSec lead, advising internal Infrastructure, Operations, and Application teams on identity best practices, compliance, and risk reduction.

REQUIREMENTS

Senior-Level Experience: Demonstrated background in Information Security / InfoSec with a heavy focus on Identity Architecture, IAM, and Identity Access Governance (IAG).

Deep Microsoft Identity Expertise: Extensive hands-on and architectural knowledge of Microsoft Entra ID and Active Directory Domain Services (AD DS).

Privileged Access Architecture: Practical knowledge of Microsoft Privilege/Separation models (Enterprise Access Model, AD Tiering, Red/Bastion Forest legacy concepts, and

.special-hidden { display: none; }