Identity Architect
Design and guide identity architecture across MKCS products, customer onboarding, enterprise integrations, and secure access models spanning cloud and hybrid environments.
Role Description
The Identity Architect owns the architecture-level thinking behind customer identity, application access, authorization, federation, lifecycle, and secure integration patterns. This role works across MKCS AI Trust Intelligence, Identity Intelligence, Enterprise ServiceDesk, Business Scheduling Intelligence, internal enterprise services, and client implementations. The architect translates business requirements into secure identity designs while keeping customer access, administrative boundaries, and operational ownership clear.
Key Responsibilities
- Design enterprise identity and access patterns across MKCS products and customer environments, including workforce, customer, application, and workload identities.
- Lead Microsoft Entra architecture for application registrations, enterprise applications, federation, application roles, Conditional Access alignment, MFA posture, and lifecycle design.
- Develop cloud and hybrid identity patterns that can integrate with AWS, Google Cloud, on-premises Active Directory, and other enterprise identity providers when required.
- Review customer onboarding requirements and translate them into secure authorization, role, group, and access-boundary designs.
- Partner with Cloud Security Engineering to evaluate privilege, secrets, workload identity, cross-cloud trust, and access-risk concerns before production use.
- Create architecture diagrams, implementation guidance, decision records, customer-facing explanations, and internal operating standards.
- Troubleshoot complex authentication, authorization, federation, token, role-claim, and identity-integration issues across product and customer environments.
- Contribute to roadmap decisions by identifying identity capabilities, governance controls, and integration patterns that strengthen the entire MKCS Ecosystem.
Ideal Background
Strong experience with enterprise IAM, Microsoft Entra ID, federation, application identity, OAuth/OIDC/SAML concepts, RBAC, MFA, Conditional Access, lifecycle governance, and cloud security architecture. Experience with AWS IAM, Google Cloud IAM, Active Directory, or multi-cloud identity is highly valuable. The role requires architecture depth, clear communication, documentation discipline, and practical troubleshooting ability.