DirectJobHub
Jobs · Art & Creative · Tennessee

Principal - Identity and Access Management Architect

Slalom · Nashville, TN · 2 days ago
Art & Creative$137k–$170k/yrFull-time

About the Role

We are seeking a Senior Consultant or Principal – Microsoft Security, Identity & Access Architecture to help lead Slalom's established Entra Suite and hybrid identity capability. This is a senior technical leadership role for an experienced Microsoft identity practitioner who combines deep technical expertise across Microsoft Entra, Active Directory Domain Services, and hybrid identity infrastructure, including Microsoft's frontier identity landscape of Microsoft Agent 365 and Entra Agent ID governing non-human and AI agent identities, with enterprise and security architecture, consulting leadership, business development, and Microsoft ecosystem experience.

You will be responsible for leading and growing this already-established capability: owning the technical vision, evolving existing offerings and intellectual property, deepening client relationships, partnering with Microsoft, supporting sales pursuits, and mentoring junior team members so the capability continues to scale across Slalom. This is not simply an implementation role. You will lead the capability, sell the capability, deliver the capability, and develop the junior consultants who will scale it.

Responsibilities

Support Microsoft Identity Capabilities

  • Contribute to Slalom's Identity & Access Architecture capabilities across the full Entra Suite, hybrid AD, and Microsoft Agent 365/Entra Agent ID
  • Support the capability's technical strategy, offerings, delivery methodology, and roadmap
  • Maintain reference architectures, accelerators, and playbooks
  • Uphold technical standards: Zero Trust identity, tiered administration/Enterprise Access Model, AD DS hardening, Conditional Access and PIM by default, documented hybrid trust with break-glass procedures, and governed PKI

Build Microsoft Relationships

  • Maintain strong relationships across the Microsoft Security and Identity field organization
  • Track the Entra roadmap and emerging hybrid identity capabilities
  • Support Microsoft partner programs and represent Slalom at Microsoft and industry events

Mentor and Grow the Team

  • Mentor junior and mid-level consultants across cloud identity and AD DS disciplines
  • Coach through hands-on project work, shadowing, and technical review
  • Guide skill development, certifications, and career paths

Deliver Client Outcomes

  • Lead complex identity transformations from strategy through operationalization
  • Assess AD DS forests and Entra tenants; lead modernization and consolidation roadmaps
  • Implement Entra ID Governance, Conditional Access, PIM, Verified ID, and AD DS hardening
  • Help clients move from legacy AD-centric identity to a sustainable hybrid, cloud-first model

Qualifications

Microsoft Identity Expertise

  • Advise CISOs, CIOs, and enterprise architects on modernizing identity and access management
  • Deep, hands-on expertise across:
    • Entra ID, Entra ID Governance, Permissions Management, Verified ID, Workload ID, Private Access, and Internet Access
    • AD DS: forest/domain design, trusts, Group Policy, DNS, and DHCP
    • Hybrid identity: Entra Connect Sync/Cloud Sync, PHS/PTA, Seamless SSO, and hybrid/Entra join
    • AD FS and federation migration to Entra ID
    • AD CS and PKI
    • Defender for Identity
    • Microsoft Agent 365/Entra Agent ID: Agent Identity Blueprints, Blueprint Principals, Agent Identities, and AI Teammate accounts
    • Azure identity: RBAC, managed identity/workload identity federation, and Key Vault access policies
  • Strong grasp of Conditional Access, PIM, and Zero Trust access models
  • Experience leading AD-to-Entra migrations and AD DS modernization/consolidation
  • Strong understanding of Kerberos, NTLM, LDAP, and directory hardening

Architecture

  • Demonstrated experience developing enterprise identity architectures
  • Experience leading architecture decisions across complex, multi-forest/multi-tenant environments
  • Ability to communicate architecture to both executives and engineers

Consulting & Leadership

  • Experience leading complex identity transformation programs at the CISO/CIO level
  • Demonstrated experience leading multidisciplinary technical teams
  • Strong executive communication skills and experience mentoring identity professionals

Benefits

  • Meaningful time off and paid holidays
  • Parental leave
  • 401(k) with a match
  • Highly subsidized health, dental, & vision coverage (range of choices)
  • Adoption and fertility assistance
  • Short/long-term disability
  • Yearly $350 reimbursement account for any well-being-related expenses
  • Discounted home, auto, and pet insurance

Pay

Slalom is committed to fair and equitable compensation practices. Targeted base salary ranges by level and location:

  • Senior Consultant (Houston, Boston, Washington DC): $136,500 – $169,500
  • Principal (Houston, Boston, Washington DC): $151,000 – $187,500
  • Principal (all other US markets except Northern California): $125,000 – $155,500
  • Principal (all other US locations except Northern California): $138,500 – $172,000

In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.

Similar jobs