{"id":3786881,"url":"https://alion.io/job/elfonze-technologies-infrastructure-security-and-iam-architect","title":"Infrastructure Security and IAM Architect","company":{"id":4445146,"name":"Elfonze Technologies","domain":"elfonze.com","url":"https://alion.io/company/elfonze-technologies","size_band":"501-1000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"B","score":80,"open_postings":16,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"SharePoint","optional":false}],"status":"live","first_seen_at":"2026-11-05T04:02:39Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-09T10:22:03Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"This is a remote position.\nRole Summary\nDesigns the identity, access and infrastructure security architecture for a carve-out, covering the hybrid domain controller and Entra ID estate. Owns the target-state design and the technical approach for moving users, mailboxes and collaboration content. Re-architects only where the separation requires it.\nJob Responsibilities\nDesign the target identity architecture across on-premises Active Directory and Microsoft Entra ID\n\nDefine SSO, MFA, Conditional Access and privileged access models\n\nDesign directory synchronisation using Microsoft Entra Connect and tenant coexistence\n\nArchitect application sign-in and federation using SAML, OAuth 2.0 and OpenID Connect\n\nDesign network access authentication using RADIUS and 802.1X\n\nDefine infrastructure security controls: segmentation, firewalls, key and secrets management\n\nDesign landing zone security controls and guardrails across Azure and AWS\n\nSelect and configure migration tooling for user, mailbox, SharePoint and Teams moves\n\nProduce high-level and low-level designs and review them with client architects\n\nDefine security logging requirements for identity and infrastructure events\n\nRequired Experience\n10+ years of relevant experience in infrastructure and security architecture\n\n5+ years designing and implementing identity, including on-premises domain controller clusters\n\nStrong understanding of Active Directory, Kerberos, LDAP and DNS\n\nStrong understanding of Microsoft Entra ID and Entra Connect version 2 or above, including Entra Domain Services\n\nHands-on experience with SSO, MFA and Conditional Access\n\nExperience with at least one third-party identity provider such as Okta or Ping Identity\n\n3+ years of experience with SAML and OAuth 2.0, plus OpenID Connect\n\nUnderstanding of RADIUS-based authentication and 802.1X\n\nExperience with migration tools such as BitTitan, Quest and AvePoint\n\nExperience with mailbox, SharePoint, Teams and user migration\n\nExperience with at least two cloud providers (Azure and AWS)\n\nExperience designing and implementing landing zones with security controls and guardrails\n\nExperience with Azure Key Vault or equivalent key management services\n\nExperience designing colocation architectures\n\nDeep understanding of hyper-converged infrastructure\n\nExposure to at least two OEMs or two cloud providers in each technology area\n\nStrong communication skills, with prior experience working with UK and EU clients\n\nWillingness to travel as required and to work in the client time zone\n\nPrior infrastructure background alongside the specialism above\n\nPrior experience in IT consolidations, mergers, demergers and carve-outs (mandatory)\n\nRelevant professional certifications strongly recommended","description_format":"text","description_chars":2731,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Technology","Transportation & Logistics","IT Consulting & Digital Transformation","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-11-05T04:02:39Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":17,"reasons":["conf:0","stale_co","velocity","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/elfonze-technologies-infrastructure-security-and-iam-architect","json_url":"https://alion.io/job/elfonze-technologies-infrastructure-security-and-iam-architect.json","meta":{"generated_at":"2026-11-09T14:09:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19087,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4445146},"rest":"https://alion.io/mcp/rest/get_company?id=4445146"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felfonze-technologies-infrastructure-security-and-iam-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felfonze-technologies-infrastructure-security-and-iam-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felfonze-technologies-infrastructure-security-and-iam-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/elfonze-technologies-infrastructure-security-and-iam-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felfonze-technologies-infrastructure-security-and-iam-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3786881}},{"tool":"search_jobs","arguments":{"company":"elfonze.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3786881},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}