Principal - Identity and Access Management Architect

About Slalom

Slalom is a global business and technology consulting company committed to helping people and organizations dream bigger, move faster, and build better tomorrows. Our Microsoft Security organization brings together deep expertise across Microsoft's security, identity, data protection, compliance, cloud, and AI security ecosystem. We are building a differentiated Microsoft Security practice focused on helping clients transform how they protect their identities, data, devices, applications, cloud environments, and AI-enabled enterprises.

About the role

We are seeking a Senior Consultant or Principal – Microsoft Security, Identity & Access Architecture to help lead Slalom's established Entra Suite and hybrid identity capability. This is a senior technical leadership role for an experienced Microsoft identity practitioner who combines deep technical expertise across Microsoft Entra, Active Directory Domain Services, and hybrid identity infrastructure, including Microsoft's frontier identity landscape of Microsoft Agent 365 and Entra Agent ID governing non-human and AI agent identities, with enterprise and security architecture, consulting leadership, business development, and Microsoft ecosystem experience. You will be responsible for leading and growing this already-established capability: owning the technical vision, evolving existing offerings and intellectual property, deepening client relationships, partnering with Microsoft, supporting sales pursuits, and mentoring junior team members so the capability continues to scale across Slalom. This is not simply an implementation role. You will lead the capability, sell the capability, deliver the capability, and develop the junior consultants who will scale it.

Responsibilities

Support Microsoft Identity Capabilities

• Contribute to Slalom's Identity & Access Architecture capabilities across the full Entra Suite, hybrid AD, and Microsoft Agent 365/Entra Agent ID.
• Support the capability's technical strategy, offerings, delivery methodology, and roadmap.
• Maintain reference architectures, accelerators, and playbooks.
• Uphold technical standards: Zero Trust identity, tiered administration/Enterprise Access Model, AD DS hardening, Conditional Access and PIM by default, documented hybrid trust with break-glass procedures, and governed PKI.

Build Microsoft Relationships

• Maintain strong relationships across the Microsoft Security and Identity field organization.
• Track the Entra roadmap and emerging hybrid identity capabilities.
• Support Microsoft partner programs and represent Slalom at Microsoft and industry events.

Mentor and Grow the Team

• Mentor junior and mid-level consultants across cloud identity and AD DS disciplines.
• Coach through hands-on project work, shadowing, and technical review.
• Guide skill development, certifications, and career paths.

Deliver Client Outcomes

• Lead complex identity transformations from strategy through operationalization.
• Assess AD DS forests and Entra tenants; lead modernization and consolidation roadmaps.
• Implement Entra ID Governance, Conditional Access, PIM, Verified ID, and AD DS hardening.
• Help clients move from legacy AD-centric identity to a sustainable hybrid, cloud-first model.

Qualifications

Microsoft Identity Expertise

• Advise CISOs, CIOs, and enterprise architects on modernizing identity and access management.
• Deep, hands-on expertise across:
  • Entra ID, Entra ID Governance, Permissions Management, Verified ID, Workload ID, Private Access, and Internet Access
  • AD DS: forest/domain design, trusts, Group Policy, DNS, and DHCP
  • Hybrid identity: Entra Connect Sync/Cloud Sync, PHS/PTA, Seamless SSO, and hybrid/Entra join
  • AD FS and federation migration to Entra ID
  • AD CS and PKI