About this opportunity
Madison-Davis, LLC lists this Cloud Platform Architect opportunity in new york city, New York. Review the employer’s description below for duties, qualifications and application requirements.
Job description
A global financial institution is looking for a senior Cloud Platform Architect to take technical ownership of its Microsoft Entra and cloud identity environment.
This is a hands-on individual contributor opportunity for someone who understands identity as a platform capability rather than simply an administrative function. You will help mature an established enterprise identity estate while defining secure, reusable patterns for workforce, privileged, workload, and external identities.
The environment emphasizes automation, secure defaults, coded guardrails, and self-service patterns. Success requires someone who can make sound architecture decisions while remaining close enough to the technology to understand rollout risk, exceptions, production impact, and long-term operational support.
Responsibilities
Own architecture and continuous improvement across the Microsoft Entra environment
Design and evolve Conditional Access, privileged-access, and entitlement controls
Define hybrid identity patterns across synchronization, authentication, attribute flow, and cloud-only identities
Establish standards for managed identities, workload identity federation, service principals, and other non-human identities
Create reusable identity patterns through automation, scripting, Infrastructure as Code, and platform guardrails
Develop architecture standards, reference designs, runbooks, and reusable implementation patterns
Partner with Security, Risk, Compliance, Audit, Directory Services, application teams, and cloud engineering
Support identity-control evidence and architecture discussions in a highly regulated environment
Role Requirements
7+ years of identity, cloud, or infrastructure engineering experience
Deep hands-on Microsoft Entra ID / Azure AD experience in an enterprise environment
Strong Conditional Access design experience
Hands-on Privileged Identity Management experience
Strong hybrid identity knowledge, including Entra Connect, Azure AD Connect, or Cloud Sync
Experience designing workload and non-human identity patterns
Working knowledge of OIDC, OAuth 2.0, SAML, MFA, and modern authentication
Understanding of Azure RBAC, Azure Policy, Key Vault, and identity integration across Azure services
Hands-on PowerShell and Microsoft Graph API experience
Experience operating in financial services or another comparably regulated enterprise
Ability to communicate technical architecture and risk clearly to engineering, security, and control stakeholders
Nice to Have
Terraform or other Infrastructure-as-Code experience
Entra External ID experience
Identity governance and Entitlement Management
Break-glass and privileged-access architecture
Banking, capital markets, or insurance experience
How We Work
Senior architects remain technically credible and close to implementation
Identity controls are designed around automation and reusable patterns rather than manual approval
Architecture decisions are evaluated for security, maintainability, supportability, and blast radius
The role partners closely with Cloud Platform, Security, Risk, Compliance, Directory Services, and application teams
The position follows a hybrid New York schedule of five onsite days across every ten business days
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.