{"id":3760604,"url":"https://alion.io/job/system-soft-technologies-senior-identity-conditional-access-security-architectsme","title":"Senior Identity & Conditional Access Security Architect/SME","company":{"id":4481260,"name":"System Soft Technologies","domain":"sstech.us","url":"https://alion.io/company/system-soft-technologies","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-11-04T17:28:06Z","employer_posted_date":null,"last_verified_at":"2026-11-05T00:20:45Z","board_verified":false,"closed_at":"2026-11-05T00:20:45Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"System Soft Technologies seeks a Senior Identity & Conditional Access Security Architect/SME to lead enterprise identity security architecture and Microsoft Entra Conditional Access. The role assesses identity environments, designs and governs security policies, documents architecture and risk, and presents recommendations to senior security leadership.\n\nResponsibilities\nOwn the end-to-end architecture and design of Microsoft Entra Conditional Access policies\nAssess existing Conditional Access policies and identify gaps, overlaps, conflicting controls, exclusions, security risks, and opportunities for consolidation\nDesign Conditional Access policies based on:\nUser/group identity\nAdministrative and privileged roles\nApplications and cloud resources\nDevice compliance\nDevice platforms\nNetwork/location conditions\nAuthentication strength\nSign-in risk\nUser risk\nWorkload identities where applicable\nDesign policies addressing scenarios such as:\nRequire MFA\nPhishing-resistant MFA\nBlock legacy authentication\nRequire compliant or managed devices\nHigh-risk sign-in/user controls\nAdministrative portal protection\nGuest/B2B access\nService and emergency access scenarios\nGeographic/location restrictions\nSession controls\nBYOD access\nDevelop an enterprise Conditional Access strategy and policy architecture aligned with Zero Trust principles\nCreate clear current-state and future-state architecture diagrams\nProduce an executive-level Conditional Access proposal explaining:\nCurrent security gaps\nProposed policies\nThreat/risk addressed by each policy\nBusiness impact\nUser experience impact\nException strategy\nRollout approach\nTesting methodology\nRollback procedures\nRisk reduction and expected security outcomes\nPresent the Conditional Access design and recommendations directly to the CISO, security leadership, IAM leadership, architecture review boards, and other senior stakeholders\nTranslate highly technical identity-security concepts into clear business-risk language suitable for executive decision making\nArchitect and strengthen Microsoft Entra ID identity-security capabilities\nDesign and implement MFA, authentication strengths, PIM, Identity Protection, RBAC, JIT access, B2B access, and Identity Governance\nApply Zero Trust principles across workforce, privileged, guest, and application access\nDefine least-privilege and privileged-access strategies\nPartner with SOC and security teams to incorporate identity risk and suspicious sign-in signals into security operations\nEstablish a structured lifecycle for policy design → review → Report-only mode → pilot → validation → production rollout → monitoring → optimization\nDefine policy naming conventions, documentation standards, ownership, exception management, and change-control processes\nEstablish dedicated break-glass/emergency access account architecture and monitoring\nAnalyze sign-in logs and Conditional Access results before enforcement\nEnsure policies do not inadvertently disrupt administrators, service identities, business-critical applications, or approved access scenarios\nDefine periodic policy review and recertification processes\nAlign identity controls with relevant enterprise security frameworks including NIST, CIS, ISO 27001, SOC 2, PCI DSS and Zero Trust principles\nMaintain architecture diagrams, security standards, implementation guides, policy matrices, decision records, and security-control documentation\nPartner with Cloud Security, SOC, IAM, Endpoint, Infrastructure, Network, GRC, Application Security and business teams\n\nSkills\nThe ideal candidate must be capable of independently assessing the current identity environment, designing a comprehensive Conditional Access Policy framework , documenting the architecture and security rationale, evaluating business and operational impact, and presenting the proposed strategy directly to the CISO and senior security leadership for review and approval\nThis person will serve as the technical authority for Microsoft Entra ID, Conditional Access, Zero Trust Identity, MFA, PIM, Identity Protection, privileged access, and identity governance\nThe profile should combine deep hands-on technical expertise with strong architecture documentation and executive-level communication skills\nDemonstrates experience with Microsoft Entra/Azure AD, B2B/B2C, RBAC, PIM, Conditional Access, MFA, JIT, Identity Protection and Zero Trust policy design, making these appropriate core requirements for the role\nAlign identity controls with relevant enterprise security frameworks including NIST, CIS, ISO 27001, SOC 2, PCI DSS and Zero Trust principles\nThe reference profile also demonstrates architecture/governance work against NIST, ISO 27001, CIS, SOC 2, PCI DSS, SOX, HIPAA and GDPR, with experience creating architecture documentation and governance frameworks\n\nCompany Overview\nSystemSoft is a company specializing in innovative IT consulting services and solutions. It was founded in 1999, and is headquartered in Tampa, Florida, USA, with a workforce of 501-1000 employees. Its website is http://www.sstech.us.\n\nCompany H1B Sponsorship\nSystem Soft Technologies has a track record of offering H1B sponsorships, with 150 in 2026, 174 in 2025, 211 in 2024, 317 in 2023, 391 in 2022, 492 in 2021, 860 in 2020. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":5321,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-04T18:20:00Z"},{"event":"close","at":"2026-11-05T00:20:45Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/system-soft-technologies-senior-identity-conditional-access-security-architectsme","json_url":"https://alion.io/job/system-soft-technologies-senior-identity-conditional-access-security-architectsme.json","meta":{"generated_at":"2026-11-09T07:07:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3995,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4481260},"rest":"https://alion.io/mcp/rest/get_company?id=4481260"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsystem-soft-technologies-senior-identity-conditional-access-security-architectsme"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsystem-soft-technologies-senior-identity-conditional-access-security-architectsme"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsystem-soft-technologies-senior-identity-conditional-access-security-architectsme"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/system-soft-technologies-senior-identity-conditional-access-security-architectsme\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsystem-soft-technologies-senior-identity-conditional-access-security-architectsme"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3760604}},{"tool":"search_jobs","arguments":{"company":"sstech.us","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3760604},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}