Azure Active Directory Security Controls Architect

Position Overview

Cloud Security Services requires an AAD Infrastructure Security and Controls Senior Manager within the Information Security & Risk Management (ISRM) organization. You will be responsible for the analysis, design, coordination, and escalation support related to Microsoft Azure Active Directory and its integrations with systems such as AD DS, Ping, Office 365, and Service Now. This is a 6-month project with the possibility of transitioning to full-time for the right candidate.

In this role you will operate within architecture and engineering organizations, working with peer teams and partners to deploy improvements, integrate Azure AD identities and services, and ensure robust security and internal controls across Technology Services (TS). As a senior subject matter expert in Information Security & Risk Management, you will support internal TS teams, audits, and risk management initiatives while mentoring colleagues and managing high-impact projects.

Key Responsibilities

• Analyze, design, and implement Azure Active Directory and its integrations with systems such as AD DS, Ping, Office 365, and Service Now.
• Provide escalation support for Azure AD and serve as a technical subject matter expert on IT risk management issues impacting business and regulatory areas.
• Ensure that proper security and controls are built into TS tools, vendors, applications, and services through evaluation and consultation.
• Proactively assess the impact of regulatory and internal control changes on TS and IT processes and advise senior management on risks, costs, and performance issues.
• Analyze complex business and competitive issues to discern implications for risk management.
• Develop and maintain strong business partner relationships with GTS IT and business stakeholders.
• Evaluate the current Azure AD environment to identify challenges and recommend solutions for operational improvements.
• Lead or participate in high-severity troubleshooting, incident resolution, and risk management activities to meet regulatory and security requirements.
• Mentor and train employees, make hiring recommendations, advise on budget allocations, and manage partner expectations at the senior management level.

Required Qualifications

• 8+ years of Information Security & Risk Management experience.
• Minimum of 4 years of experience maintaining Active Directory Enterprise/Domain Admin and/or Azure Global Admin responsibilities.
• Knowledge of Azure MFA integration solutions and understanding of Microsoft Azure tenants/subscriptions.
• Deep understanding of federation technologies (WS-Fed, OAuth, SAML, etc.).
• Strong working knowledge of Windows Server (2008, 2012, 2016), DNS, networks, DMZs, firewalls, and network security zones.
• Proven risk management skills with the ability to voice concerns regarding the integrity of on-premise Active Directory.
• Minimum of 3 years of related Information Risk Management experience.
• Experience with Governance, Risk and Compliance tools and applications and the ability to work effectively with virtual, global teams.
• BA/BS in Information Technology/Information Security or a minimum university degree equivalent.

Preferred Qualifications

• MS and/or advanced degree preferred.
• Microsoft Certifications and Information Security & Risk Management certifications preferred.
• Working knowledge of COBIT and/or ITIL is preferred.
• Knowledge of key business processes preferred.
• GxP background is an asset (desirable but not required).
• Industry experience with Information Security, Risk Management, and Risk Assurance.