Senior Identity & Conditional Access Security Architect/SME

Tasks

• Assess existing Conditional Access policies and identify gaps, conflicts, exclusions, and security risks.
• Design enterprise-wide Conditional Access policies covering MFA, phishing-resistant authentication, privileged access, compliant devices, guest access, and risk-based controls.
• Develop current-state and future-state identity architecture diagrams.
• Establish Zero Trust identity strategy, policy governance, exception management, and rollout frameworks.
• Define Report-only, pilot, validation, production rollout, monitoring, and rollback processes.
• Design break-glass/emergency access architecture.
• Align identity security controls with NIST, CIS, ISO 27001, SOC 2, and PCI DSS.
• Present architecture recommendations, business impact, and risk reduction strategy directly to the CISO and senior security leadership.

Requirements

• Need local candidates
• Microsoft Entra ID (Azure AD)
• Conditional Access – enterprise-level policy architecture and hands-on design
• Zero Trust Identity Architecture
• MFA and Authentication Strength
• Microsoft Entra ID Protection
• Privileged Identity Management (PIM)
• Identity Governance, RBAC, and Least Privilege
• B2B / Guest Access and Device-Based Access
• Microsoft Intune understanding
• Security Architecture and Executive Presentations
• 8+ years of IT/Security experience.
• Strong enterprise-level Microsoft Entra Conditional Access architecture and implementation.
• Proven experience with MFA, PIM, Identity Protection, RBAC, and Zero Trust.
• Ability to build architecture documentation, policy matrices, security roadmaps, and executive presentations.

Location

• Chicago, IL