Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 days ago

Principal Microsoft Entra ID Architect

Unisys362 open roles

Where
Blue Bell, PA, United States of America
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Microsoft Entra ID ArchitectUnisys · Blue Bell, PA, United States of America

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Unisys's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Unisys postings stay open a median of 24 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 5 days ago

Unisys median: 24 days open

The posting

What success looks like in this role:

Highly skilled Security Architect with deep expertise in Microsoft Entra ID to lead the design, implementation, and governance of company Entra ID tenants. The primary focus of this position is advancing the corporate IT strategy to reduce reliance on Active Directory by adopting secure, cloud-based identity capabilities in Microsoft Entra ID. While Active Directory remains critical to current operations, the role also provides senior security architecture and strategic guidance to ensure corporate Active Directory environments remain secure, resilient, operationally sound, and appropriately integrated throughout the transition. This role is pivotal in ensuring identity configurations, security, and operational practices align with Zero Trust principles, corporate security policies, and industry best practices. This is a hands-on role requiring technical depth, architectural leadership, and delivery focus.

Entra ID

  • Design architect and SME for corporate tenant directory baseline configurations and settings.
  • Govern roles, permissions and consent management, enforcing least privilege through robust delegated and application permission models.
  • Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests.
  • Implement Tenant DR recoverability using best cost-effective means
  • Implement application access reviews to validate permissions and ensure least privileged access.
  • Design and drive optimal security and cost
  • Securely manage application secrets and certificates, integrating with corporate PKI infrastructure and Azure Key Vaults.
  • Design and enforce Conditional Access policies based on user, location, device, and risk signals in coordination with security team.
  • Conduct threat modeling and risk assessments for authentication and authorization flows.
  • Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor, and Entra ID audit logs.
  • Define and maintain the enterprise identity architecture leveraging Microsoft Entra ID.
  • Lead the adoption of modern authentication (OAuth, OIDC, SAML, FIDO2, passwordless).
  • Implement identity lifecycle automation using tools such as Entra ID Governance (IGA), Privileged Identity Management (PIM), and Access Reviews.
  • Deploy and manage Entra Connect, Cloud Sync, federation, and SSO configurations.
  • Integrate third-party SaaS and internal applications with Entra ID for SSO and provisioning (SCIM).
  • Support the rollout of MFA, passwordless authentication, and secure sign-in enhancements.

Active Directory Security and Architecture:

  • Provide senior security architecture and strategic direction for Active Directory environments across the corporation, with particular emphasis on the company’s production environment.
  • Define and govern enterprise Active Directory architecture, security, privileged access, resilience, and operational standards.
  • Partner with Active Directory engineering and operations teams to ensure critical directory services remain secure, resilient, operationally sound, and recoverable.
  • Architect and oversee secure integration between Active Directory and Microsoft Entra ID across hybrid identity services.
  • Advance the corporate strategy to reduce reliance on Active Directory by modernizing identity services and transitioning appropriate capabilities to Microsoft Entra ID.
  • Assess architectural risks and legacy dependencies, guide remediation and dependency-reduction initiatives, and provide senior escalation for complex or high-risk security and design decisions.

Strategic Problem Solving:

  • Lead structured problem-solving for complex, high-impact identity and security challenges, with primary emphasis on Microsoft Entra ID, cloud identity governance, authentication, authorization, and application access.
  • Develop scalable Entra ID target-state architectures and prioritized roadmaps that balance security, availability, operational supportability, cost, and business requirements.
  • Analyze systemic identity risks, legacy dependencies, and integration challenges across cloud and hybrid environments and translate findings into actionable remediation and modernization strategies.
  • Provide senior architectural guidance and escalation support for Active Directory security, architecture, resilience, and hybrid identity issues, partnering with the established Active Directory team rather than assuming day-to-day operational ownership.
  • Drive alignment among security, engineering, operations, governance, leadership, and business-unit teams to ensure identity standards are adopted and material risks are addressed.
  • Track and communicate progress, dependencies, risk reduction, and business impact for major Entra ID and related Active Directory initiatives.
  • Stay current on identity-based threats, Microsoft security capabilities, regulatory requirements, and industry practices to guide the long-term identity security strategy.

You will be successful in this role if you have:

Required

  • BA/BS degree and 8+ years’ relevant experience OR equivalent combination of education and experience
  • 5+ years primary focus on Microsoft Azure/Entra ID
  • Demonstrated experience serving in an engineering or architectural role with responsibility for Microsoft Entra ID, Active Directory, and hybrid identity environments.
  • Experience implementing conditional access, MFA, identity protection, and PIM.
  • Hands-on experience with Entra Connect, Cloud Sync, federation, SSO, and app integrations.
  • Proven experience securing application registrations, service principals, and enterprise applications in single/multi-tenant environments.
  • Deep expertise in Microsoft Entra ID, including Conditional Access, Entra Directory Configuration, Roles and Permissions, Privileged Identity Management (PIM).
  • Proven expertise in PowerShell, Graph API, Automation and ability to create and modify scripts for purposes of configuration settings and report access.
  • Strong understanding of modern authentication protocols: SAML, OAuth 2.0, OpenID Connect, Kerberos and LDAP.
  • Experience with Microsoft Graph API permissions (Application and Delegated) with deep understanding of how they apply and most secure methods for assignment.

Preferred

  • 10 or more years of related experience preferred
  • Master’s degree preferred

#LI-JV1

This role may require access to export-controlled commodities and technology. Therefore, to conform to U.S. export control regulations, applicant should be eligible for any required authorizations from the U.S. Government.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected] or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ EEO commitment here.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Unisys's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Unisys's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Unisys's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.