Cloud Platform Architect
madisondavisJersey City (NJ)
Cloud Platform Architect
Posted 19 days ago
madisondavisJersey City (NJ)
SENIORITY
Manager
About the role
A global financial institution is looking for a senior Cloud Platform Architect to take technical ownership of its Microsoft Entra and cloud identity environment. This is a hands-on individual contributor opportunity for someone who understands identity as a platform capability rather than simply an administrative function. You will help mature an established enterprise identity estate while defining secure, reusable patterns for workforce, privileged, workload, and external identities. The environment emphasizes automation, secure defaults, coded guardrails, and self-service patterns. Success requires someone who can make sound architecture decisions while remaining close enough to the technology to understand rollout risk, exceptions, production impact, and long-term operational support.
Responsibilities:
- Own architecture and continuous improvement across the Microsoft Entra environment
- Design and evolve Conditional Access, privileged-access, and entitlement controls
- Define hybrid identity patterns across synchronization, authentication, attribute flow, and cloud-only identities
- Establish standards for managed identities, workload identity federation, service principals, and other non-human identities
- Create reusable identity patterns through automation, scripting, Infrastructure as Code, and platform guardrails
- Develop architecture standards, reference designs, runbooks, and reusable implementation patterns
- Partner with Security, Risk, Compliance, Audit, Directory Services, application teams, and cloud engineering
- Support identity-control evidence and architecture discussions in a highly regulated environment
Role Requirements:
- 7+ years of identity, cloud, or infrastructure engineering experience
- Deep hands-on Microsoft Entra ID / Azure AD experience in an enterprise environment
- Strong Conditional Access design experience
- Hands-on Privileged Identity Management experience
- Strong hybrid identity knowledge, including Entra Connect, Azure AD Connect, or Cloud Sync
- Experience designing workload and non-human identity patterns
- Working knowledge of OIDC, OAuth 2.0, SAML, MFA, and modern authentication
- Understanding of Azure RBAC, Azure Policy, Key Vault, and identity integration across Azure services
- Hands-on PowerShell and Microsoft Graph API experience
- Experience operating in financial services or another comparably regulated enterprise
- Ability to communicate technical architecture and risk clearly to engineering, security, and control stakeholders
Nice to Have:
- Terraform or other Infrastructure-as-Code experience
- Entra External ID experience
- Identity governance and Entitlement Management
- Break-glass and privileged-access architecture
- Banking, capital markets, or insurance experience
- How We WorkSenior architects remain technically credible and close to implementation
- Identity controls are designed around automation and reusable patterns rather than manual approval
- Architecture decisions are evaluated for security, maintainability, supportability, and blast radius
- The role partners closely with Cloud Platform, Security, Risk, Compliance, Directory Services, and application teams
- The position follows a hybrid New York schedule of five onsite days across every ten business days
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.