Security Cloud Solution Architect- CTJ - Poly

Job description

**Overview** Microsoft Federal delivers a single unified organization centered around our customer. This organization is a first-of-its-kind for Microsoft, bringing together expertise, knowledge, and insights across our teams. All critical customer functions are brought under the same organizational umbrella, bringing the breadth and depth of our expertise into laser focus on serving the U.S. Federal Government. We are committed to empowering our teams, building upon our strategic investments, and delivering the technology to achieve federal missions. As our customers pursue their work, from defending the nation, to serving its people in challenging times, they look to Microsoft to help them innovate, and they expect end-to-end engagement tailored to their needs. We aspire to... - Deliver the best technology to enable mission-critical work - Support fast-paced innovation with the U.S Federal Government - Drive focused, thoughtful, end-to-end delivery tailored to unique customer needs - Continuously advance security processes within our long-standing engagement approach - Develop products with inclusivity and accessibility at the core We are looking for a **Security Cloud Solution Architect (CSA)** with a focus on Identity and Access Management (IAM) to drive customer transformation on the Microsoft Cloud platform. This is a customer-facing technical role responsible for leading Identity engagements, owning the technical relationship with customers, and delivering secure Identity architectures that enable Zero Trust and mission success. Microsoft is on a mission to empower every person and every organization on the planet to achieve more, and security, data protection, and privacy are vital pillars in our mission. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging our diverse teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us to achieve our mission. **Responsibilities** Microsoft Federal is looking for individuals passionate about driving security solutions and outcomes that enable mission-critical work for the U.S. Federal Government. The speed of technology is fast; the speed of security is even faster – candidates must be interested in maintaining technical expertise supported by many skilling resources provided by Microsoft to invest in your growth. Ideal candidates for this role will meet the following. - Identity Architecture & Delivery - Lead Identity and Access Management (IAM) engagements, serving as the primary technical authority for Identity solutions - Lead the administration, maintenance, and troubleshooting of enterprise identity systems, including: - Microsoft Active Directory - Microsoft Identity Manager (MIM/FIM) - Active Directory Federation Services (AD FS) - Assist with hybrid identity and modernization initiatives involving: - Active Directory and Microsoft Entra ID integration - MFA and Conditional Access implementations - Privileged access management concepts like least privilege - Apply Zero Trust principles to Identity and Access Management operations - Identity and remediate identity-related security risks and operational issues - Support compliance, audit and security review activities related to identity systems - Collaborate with: - Security, Apps, and Infrastructure Microsoft partners - Account teams and engineering - Act as Voice of the Customer, providing feedback to influence product direction and remove blockers - Build technical credibility and trusted advisor relationships with customers Travel is an integral part of this position. You should be willing to travel as is demanded by the needs of our customers and our business. This position requires approximately 25% overnight travel if you reside or are willing to relocate within commuting distance to the work. This position may require up to 75% overnight travel if you are not within commuting distance to work. **Qualifications** **Required Qualifications:** - Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 2+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting - OR equivalent experience. Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: - The successful candidate must have an active U.S. Government Top Secret Clearance with access to Sensitive Compartmented Information (SCI) based on a Single Scope Background Investigation (SSBI) with Polygraph. Ability to meet Microsoft, customer and/or government security screening requirements are required pre-offer and post-hire for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination. - **Clearance Verification:** This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment. - **Microsoft Cloud Background Check:** This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. - **Citizenship & Citizenship Verification:** This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance. **Preferred Qualifications:** - Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 5+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting - OR Master's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field AND 3+ years experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting - OR equivalent experience. - Experience designing or implementing: - On-premises identity technologies, including: - Microsoft Active Directory Domain Services (AD DS) - Group Policy administration - Active Directory Federation Services (AD FS) - Microsoft Identity Manager (MIM) - Public Key Infrastructure (PKI) - Experience supporting identity operations in regulated, disconnected, or highly secure environments is preferred. - Exposure to modern identity and security concepts, including: - Microsoft Entra ID - Hybrid identity (Active Directory + Entra ID) - Multi-factor authentication (MFA) - Conditional Access - Privileged Identity Management (PIM) - Understanding of Zero Trust security principles, including: - Identity as a security control plane - Least privilege access - Strong authentication and continuous verification - Exposure to: - Identity Governance and access reviews - Role-based access control (RBAC) - Application and Workload Identities - Demonstrated interest in growing technical expertise in modern identity security technologies, including Microsoft Entra and cloud-based identity architectures. - Familiarity with U.S. Federal identity and security requirements (e.g., ICAM, E-ICAM, Zero Trust guidance) - Microsoft Certifications Preferred - SC-300: Identity and Access Administrator - SC-100: Cybersecurity Architect Cloud Solution Architecture IC3 - The typical base pay range for this role across the U.S. is USD $86,100 - $169,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $113,300 - $187,400 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. --- Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about [**requesting accommodations.**](https://careers.microsoft.com/v2/global/en/accessibility.html)