Mindlance
Architect Premium III - Azure Entra ID/Purview
Mindlance, Washington, District of Columbia, us, 20022
Position Summary:
Title:
Architect Premium III - Azure Entra ID/PurviewDuration:
8 Months - Long TermLocation:
Washington, DC 20433
Hybrid Onsite: 4 Days onsite per week from Day1 currently.
Notes:Candidate must have expertise in:1.
Access Management authorization technologies from PlainID and Azure2.
Solution Architecture :
Must be fluent in creating Process Models &Reference Architecture diagrams .3.
Azure Technologies:
Must have extensive experience with MS Azure Services and Platforms both including MS Azure Purview, and Entra ID4.
Cloud Security Design and implementation5.
Data Protection:
How to enforce protections during data collection, data storage and transfer of data. 6. Data Compliance and Governance.
The candidate must be a
strong Security architect with direct hands-on experience develop, configuring and deploying Access Management Authorization Policies into production . Client currently uses
PlainID to provide authorization services to applications . In the coming future we will also be exploring the
authorization capabilities provided by the Azure Platform . The candidate must be able to
architect and develop with the PlainID authorization platform and also be able to assist the client in the use of Azure .
SCOPE OF WORK
Reporting to the Access Management project manager, the primary responsibilities of the selected candidate will include, but not be limited to, the following:
1. Architect and Design:
Architect and design Access Management technology solutions, including installations, integrations, and supporting infrastructure.Create and maintain enterprise standard architectural documentation, reference diagrams, process models, and runbooks.
2. Technology Solutions :
Plan, coordinate, and execute solutions for infrastructure, cloud, and network activities related to Access Management, including installations, upgrades, and patches.Implement and manage access management solutions such as PlainID and Azure Active Directory (Entra ID), ensuring integration with enterprise systems.Automate security tasks using Azure DevOps and infrastructure as code (IaC) tools like ARM templates, Terraform.Utilize Microsoft Azure services (Azure Security Center, Azure Sentinel, Azure Key Vault) to enhance security, compliance, and enforce policies via Azure Policy and Blueprints.Utilize Azure Databricks for big data processing, advanced analytics, and machine learning.Integrate access management solutions with enterprise systems and Azure DevOps for CI/CD pipelines.Design secure network architectures using Azure Virtual Network, NSGs, and Azure Firewall for secure connectivity between on-premises and cloud environments .Review and improve infrastructure setup and deployment models to ensure security and compliance.
3. Cloud and DevOps Integration:
Utilize Azure platforms and implement DevOps practices (CI/CD, containerization, infrastructure as code, policy as code) to streamline deployment and operations.Integrate Azure DevOps for automation pipeline in deployment and testing, adhering to best practices.
4. Policy Development and Management:
Design and develop access management authorization policies using natural language expressions.Plan and manage deployments of Access Management Policies and authorization platforms, including PlainID installations, upgrades, and patches.
5. Cross-Functional Collaboration:
Collaborate with developers, QA, project managers, and stakeholders to ensure cohesive product development and operations.
6. Agile Methodologies:
Use Agile/Scrum methodologies to facilitate iterative development and rapid project delivery.Maintain authorization documentation in Azure DevOps and MS Teams.
7. Reporting:
Expand the access management and authorization framework to include new reporting and authorization capabilities. Develop a robust and stable access management reporting framework and solution that meets operational needs.Provide weekly status reports and timely deliverables and updates.
SKILLS / EXPERIENCE REQUIRED:
1. Access Management Expertise:
Extensive Hands-on experience with Access Management Authorization technologies.Experience with using standardized natural language framework to develop and manage authorization policies.Experience with IAM components and general Authorization Technology setup, configuration, and administration.
2. Solution Architecture:
Expertise in designing end-to-end solutions that align with business needs and enterprise standards.Ability to create reference architecture diagrams using tools like iGrafx or Microsoft Visio.Strong understanding of enterprise architecture frameworks such as TOGAF, Zachman or similar frameworks.Experience in developing and maintaining enterprise architecture artifacts, including principles, standards, and guidelines.
3. Azure Technologies:
Extensive experience with Microsoft Azure services.Proficiency in Azure DevOps for CI/CD pipeline integration and automation.Experience with Microsoft Entra ID for identity and access management.Familiarity with Microsoft Purview for data governance and compliance.Knowledge of Azure Resource Manager (ARM) templates and Azure Policy.Expertise in designing and implementing scalable, secure, and resilient cloud architectures.
4. Cloud Security Design and Implementation:
Experience with designing secure cloud architectures on Microsoft Azure following best practices (CIS Controls, NIST, ISO 27001).Expertise in managing identities, authentication, and authorization using Azure Active Directory (Entra ID).
5. Data Protection:
Experience with data encryption, data loss prevention policies, and secure data storage solutions (Azure Blob Storage, ADLS, Azure SQL Database) in Azure.Experience with Microsoft Information Protection (MIP) for data classification and labeling.Experience with developing secure backup and recovery strategies using Azure Backup and Azure Site Recovery.
6. Network Security:
Experience with designing secure network architectures using Azure Virtual Network, NSGs, and Azure Firewall.
7. Threat Detection and Response:
Experience using Azure Sentinel and Azure Security Center for threat detection and continuous security monitoring.
8. Compliance and Governance:
Knowledge with privacy compliance regulations using tools such as Microsoft Purview Compliance Manager.
9. Security Monitoring and Auditing:
Experience with implementing audit and security monitoring practices with Azure Monitor and Log Analytics.
10. SharePoint:
Experience integrating SharePoint with other IAM solutions to ensure seamless access control and compliance.
11. Database Experience:
Expertise in database security and administration (Oracle, Postgres, MSSQL, Cosmos DB).Knowledge of data warehousing and ETL processes.
12. API Integration and Development:
Strong experience in API design, development, and management using Azure API Management and OAuth/JWT for security.Experience with API documentation tools like Swagger/OpenAPI.
13. General Technical Skills:
Strong understanding of software development lifecycle (SDLC) and agile methodologies.Proficiency in programming languages such as C#, JavaScript, Python, and experience with version control systems like Git.Strong problem-solving skills and experience troubleshooting complex technical issues.
14. Soft Skills:
Strong communication and collaboration skills with the ability to present solutions to stakeholders and manage multiple priorities.
Additional Requirements:
1. Professional Experience:
8+ years of hands-on experience with IAM technology architecture, design, and development.Bachelor's degree or higher in Computer Science or a related field.
2. Certifications:Relevant certifications such as Microsoft Certified:
Azure FundamentalsAzure Solutions Architect ExpertAzure Security Engineer AssociateSecurity, Compliance, and Identity FundamentalsPower BI Data Analyst Associate are highly desirable.EEO:
"Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of - Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."
Title:
Architect Premium III - Azure Entra ID/PurviewDuration:
8 Months - Long TermLocation:
Washington, DC 20433
Hybrid Onsite: 4 Days onsite per week from Day1 currently.
Notes:Candidate must have expertise in:1.
Access Management authorization technologies from PlainID and Azure2.
Solution Architecture :
Must be fluent in creating Process Models &Reference Architecture diagrams .3.
Azure Technologies:
Must have extensive experience with MS Azure Services and Platforms both including MS Azure Purview, and Entra ID4.
Cloud Security Design and implementation5.
Data Protection:
How to enforce protections during data collection, data storage and transfer of data. 6. Data Compliance and Governance.
The candidate must be a
strong Security architect with direct hands-on experience develop, configuring and deploying Access Management Authorization Policies into production . Client currently uses
PlainID to provide authorization services to applications . In the coming future we will also be exploring the
authorization capabilities provided by the Azure Platform . The candidate must be able to
architect and develop with the PlainID authorization platform and also be able to assist the client in the use of Azure .
SCOPE OF WORK
Reporting to the Access Management project manager, the primary responsibilities of the selected candidate will include, but not be limited to, the following:
1. Architect and Design:
Architect and design Access Management technology solutions, including installations, integrations, and supporting infrastructure.Create and maintain enterprise standard architectural documentation, reference diagrams, process models, and runbooks.
2. Technology Solutions :
Plan, coordinate, and execute solutions for infrastructure, cloud, and network activities related to Access Management, including installations, upgrades, and patches.Implement and manage access management solutions such as PlainID and Azure Active Directory (Entra ID), ensuring integration with enterprise systems.Automate security tasks using Azure DevOps and infrastructure as code (IaC) tools like ARM templates, Terraform.Utilize Microsoft Azure services (Azure Security Center, Azure Sentinel, Azure Key Vault) to enhance security, compliance, and enforce policies via Azure Policy and Blueprints.Utilize Azure Databricks for big data processing, advanced analytics, and machine learning.Integrate access management solutions with enterprise systems and Azure DevOps for CI/CD pipelines.Design secure network architectures using Azure Virtual Network, NSGs, and Azure Firewall for secure connectivity between on-premises and cloud environments .Review and improve infrastructure setup and deployment models to ensure security and compliance.
3. Cloud and DevOps Integration:
Utilize Azure platforms and implement DevOps practices (CI/CD, containerization, infrastructure as code, policy as code) to streamline deployment and operations.Integrate Azure DevOps for automation pipeline in deployment and testing, adhering to best practices.
4. Policy Development and Management:
Design and develop access management authorization policies using natural language expressions.Plan and manage deployments of Access Management Policies and authorization platforms, including PlainID installations, upgrades, and patches.
5. Cross-Functional Collaboration:
Collaborate with developers, QA, project managers, and stakeholders to ensure cohesive product development and operations.
6. Agile Methodologies:
Use Agile/Scrum methodologies to facilitate iterative development and rapid project delivery.Maintain authorization documentation in Azure DevOps and MS Teams.
7. Reporting:
Expand the access management and authorization framework to include new reporting and authorization capabilities. Develop a robust and stable access management reporting framework and solution that meets operational needs.Provide weekly status reports and timely deliverables and updates.
SKILLS / EXPERIENCE REQUIRED:
1. Access Management Expertise:
Extensive Hands-on experience with Access Management Authorization technologies.Experience with using standardized natural language framework to develop and manage authorization policies.Experience with IAM components and general Authorization Technology setup, configuration, and administration.
2. Solution Architecture:
Expertise in designing end-to-end solutions that align with business needs and enterprise standards.Ability to create reference architecture diagrams using tools like iGrafx or Microsoft Visio.Strong understanding of enterprise architecture frameworks such as TOGAF, Zachman or similar frameworks.Experience in developing and maintaining enterprise architecture artifacts, including principles, standards, and guidelines.
3. Azure Technologies:
Extensive experience with Microsoft Azure services.Proficiency in Azure DevOps for CI/CD pipeline integration and automation.Experience with Microsoft Entra ID for identity and access management.Familiarity with Microsoft Purview for data governance and compliance.Knowledge of Azure Resource Manager (ARM) templates and Azure Policy.Expertise in designing and implementing scalable, secure, and resilient cloud architectures.
4. Cloud Security Design and Implementation:
Experience with designing secure cloud architectures on Microsoft Azure following best practices (CIS Controls, NIST, ISO 27001).Expertise in managing identities, authentication, and authorization using Azure Active Directory (Entra ID).
5. Data Protection:
Experience with data encryption, data loss prevention policies, and secure data storage solutions (Azure Blob Storage, ADLS, Azure SQL Database) in Azure.Experience with Microsoft Information Protection (MIP) for data classification and labeling.Experience with developing secure backup and recovery strategies using Azure Backup and Azure Site Recovery.
6. Network Security:
Experience with designing secure network architectures using Azure Virtual Network, NSGs, and Azure Firewall.
7. Threat Detection and Response:
Experience using Azure Sentinel and Azure Security Center for threat detection and continuous security monitoring.
8. Compliance and Governance:
Knowledge with privacy compliance regulations using tools such as Microsoft Purview Compliance Manager.
9. Security Monitoring and Auditing:
Experience with implementing audit and security monitoring practices with Azure Monitor and Log Analytics.
10. SharePoint:
Experience integrating SharePoint with other IAM solutions to ensure seamless access control and compliance.
11. Database Experience:
Expertise in database security and administration (Oracle, Postgres, MSSQL, Cosmos DB).Knowledge of data warehousing and ETL processes.
12. API Integration and Development:
Strong experience in API design, development, and management using Azure API Management and OAuth/JWT for security.Experience with API documentation tools like Swagger/OpenAPI.
13. General Technical Skills:
Strong understanding of software development lifecycle (SDLC) and agile methodologies.Proficiency in programming languages such as C#, JavaScript, Python, and experience with version control systems like Git.Strong problem-solving skills and experience troubleshooting complex technical issues.
14. Soft Skills:
Strong communication and collaboration skills with the ability to present solutions to stakeholders and manage multiple priorities.
Additional Requirements:
1. Professional Experience:
8+ years of hands-on experience with IAM technology architecture, design, and development.Bachelor's degree or higher in Computer Science or a related field.
2. Certifications:Relevant certifications such as Microsoft Certified:
Azure FundamentalsAzure Solutions Architect ExpertAzure Security Engineer AssociateSecurity, Compliance, and Identity FundamentalsPower BI Data Analyst Associate are highly desirable.EEO:
"Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of - Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."