{"id":1271970,"url":"https://alion.io/job/mizuho-financial-group-cloud-platform-architect","title":"Cloud Platform Architect","company":{"id":1828799,"name":"Mizuho Financial Group","domain":"mizuhogroup.com","url":"https://alion.io/company/mizuhogroup","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":22,"ghost_share":0,"stale_share":0.955,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":112000,"max":205000,"currency":"USD","period":"year","gross":null,"usd_annual":205000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-28T00:00:00Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-10-18T03:05:30Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Join Mizuho as a Cloud Platform Architect, Entra!\nAbout the role\nWe are hiring a Cloud Platform Architect specializing in identity to own cloud identity as a platform capability within our Cloud Platform team.\nYou will take ownership of our Microsoft Entra estate and everything from the synchronization boundary up: authentication design, access policy, hybrid identity, and the identity patterns the rest of the platform builds on. The platform operates on an enablement model: guardrails enforced in code and self-serve patterns as the default path. Your job is to make secure identity the easiest option, not a queue.\nThis is a role for someone who wants a domain of their own: full technical ownership of cloud identity in a regulated financial environment, a direct line into platform and architecture decisions, and a roadmap that includes building our external identity capability from the ground up.\nWhat you will own\nThe Microsoft Entra estate: tenant configuration, Conditional Access, Privileged Identity Management, entitlement management\nHybrid identity design: synchronization scope, attribute flow, authentication method, and cloud-only account policy\nIdentity patterns for platform services: workload identities, service account lifecycle, and non-human identity governance\nBreak-glass access design and its integration with the bank's privileged access management platform\nExternal and business-partner identity architecture (Entra External ID) per the cloud roadmap\nIdentity blueprints, runbooks, and the documentation that makes the estate operable beyond one person\nResponsibilities\nDesign and operate secure, compliant identity for our Azure estate using Microsoft Entra ID, aligned to regulatory and internal audit requirements, including access control and MFA provisions\nDesign, implement, and iterate Conditional Access policies, Privileged Identity Management, and entitlement management across the tenant\nPublish identity standards as both clear documentation and consumable patterns: reference designs, reusable Terraform modules, and paved-road configurations that make the standard the easiest path to follow\nEnforce identity guardrails through Azure Policy and automation rather than manual approval\nOwn hybrid identity and the technical interface with the directory services team: Entra Connect scope, what synchronizes, what stays cloud-only, and how the boundary is controlled\nDesign workload identity patterns for Azure services and pipelines: managed identities, workload identity federation, and service principal lifecycle\nPartner with Security, Risk, and Compliance to integrate regulatory controls and evidence collection into identity designs\nRepresent cloud identity in audit and regulatory conversations\nQualifications\n7+ years in identity or infrastructure engineering, including deep hands-on Microsoft Entra ID experience at enterprise scale\nProven experience in regulated financial services (banking, capital markets, or insurance) or a comparably regulated environment\nStrong command of Conditional Access design, Privileged Identity Management, hybrid identity (Entra Connect / cloud sync), and workload identity patterns\nExperience taking ownership of an established identity estate and maturing its configuration, documentation, and controls\nWorking knowledge of authentication standards (OIDC, OAuth 2.0, SAML) and modern authentication policy (phishing-resistant MFA, token protection)\nSolid working knowledge of the broader Azure platform: RBAC, Azure Policy, Key Vault, and how identity integrates with core infrastructure services\nFamiliarity with control frameworks and regulatory expectations for identity and access management\nScripting and automation proficiency (PowerShell, Microsoft Graph API); Infrastructure-as-Code experience preferred\nWhat distinguishes a strong candidate\nYou build a defensible picture of an environment before changing anything in it\nYou know what you chose not to enforce, and why: policy design for you is about blast radius and rollout, not checklists\nYou have made an identity control easier to follow instead of easier to bypass\nYour last hands-on work was recent, and you intend to keep it that way\nThe expected base salary ranges from $112k-$205k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.\nOther requirements\nMizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in-office requirements that will be communicated to you as part of the recruitment process.\nCompany Overview\nMizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of ~$2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill, Mizuho provides M&A, restructuring and private capital advisory capabilities across Americas, Europe and Asia. Mizuho Americas employs approximately 3,500 professionals, and its capabilities span corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody and research. Visit www.mizuhoamericas.com.\nMizuho Americas offers a competitive total rewards package.\nWe are an EEO/AA Employer - M/F/Disability/Veteran.\nWe participate in the E-Verify program.\nWe maintain a drug-free workplace and reserve the right to require pre- and post-hire drug testing as permitted by applicable law.","description_format":"text","description_chars":6057,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-09-26T00:35:42Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.479,"p_room":0.45,"age_days":50,"expected_fill_days":31,"reasons":["conf:34","stale_co","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":205000,"is_top_pay":true},"html_url":"https://alion.io/job/mizuho-financial-group-cloud-platform-architect","json_url":"https://alion.io/job/mizuho-financial-group-cloud-platform-architect.json","meta":{"generated_at":"2026-10-18T22:00:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25328,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1828799},"rest":"https://alion.io/mcp/rest/get_company?id=1828799"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmizuho-financial-group-cloud-platform-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmizuho-financial-group-cloud-platform-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmizuho-financial-group-cloud-platform-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mizuho-financial-group-cloud-platform-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmizuho-financial-group-cloud-platform-architect"}]}