Jr Architect - IAM

Job Title

Jr Architect – IAM

Job Description Summary

Job Description

Job Summary

The Junior Identity Architect is responsible for designing, implementing, and managing identity and access solutions across the enterprise. This role ensures secure and efficient access to systems and data, leveraging technologies such as Active Directory, Microsoft Entra ID, and conditional access policies. The ideal candidate will have hands-on experience with identity governance, authentication protocols, and access control mechanisms.

Key Responsibilities

Active Directory & Entra ID

• Manage and maintain on-premises Active Directory and Azure AD (Entra ID) environments.
• Implement and troubleshoot group policies, OU structures, and domain trusts.
• Support hybrid identity configurations and synchronization using Azure AD Connect.

Conditional Access Policies

• Design and enforce conditional access policies based on user roles, device compliance, and location.
• Monitor policy effectiveness and adjust configurations to enhance security and user experience.
• Collaborate with security teams to align access controls with organizational risk posture.

IAM Operations

• Role will primarily work on Governance and Compliance using our internal tools.
• Support SSO and MFA implementations using tools like Microsoft Authenticator and third-party providers.
• Conduct periodic access reviews and audits to ensure compliance with policies.

Security & Compliance

• Ensure IAM solutions comply with regulatory standards such as GDPR, HIPAA, and ISO 27001.
• Assist in identity-related incident investigations and remediation efforts.
• Document IAM processes, configurations, and change management activities.

Required Skills & Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or equivalent Industry certification.
• 1–2 years of experience in IAM or related IT security roles.
• Strong knowledge of Active Directory, Entra ID (Azure AD), and identity federation.
• Experience with conditional access policies and MFA configurations.
• Understanding of authentication protocols such as SAML, OAuth, and OpenID Connect.
• Excellent problem-solving and communication skills.

Preferred Qualifications

• Experience with identity governance platforms (e.g., SailPoint, Saviynt).
• Familiarity with cloud platforms (Azure, AWS, GCP) and their IAM models.
• Security certifications such as Microsoft SC-300, CISSP, or CompTIA Security+.

Career Path & Growth Opportunities

This role provides a pathway to senior IAM roles, including IAM Architect, Identity Governance Lead, or Security Engineer, with opportunities to lead enterprise-wide identity transformation initiatives.

Cushman & Wakefield also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health, vision, and dental insurance, flexible spending accounts, health savings accounts, retirement savings plans, life, and disability insurance programs, and paid and unpaid time away from work. In addition to a comprehensive benefits package, Cushman and Wakefield provide eligible employees with competitive pay, which may vary depending on eligibility factors such as geographic location, date of hire, total hours worked, job type, business line, and applicability of collective bargaining agreements.

The compensation that will be offered to the successful candidate will depend on factors such as whether the position is covered by a collective bargaining agreement, the geographic area in which the work will be performed, market pay rates in that area, and the candidate’s experience and qualifications.

The company will not pay less than minimum wage for this role.

The compensation for the position is: $ 64,940.00 - $76,400.00

Cushman & Wakefield is an Equal Opportunity employer to all protected groups, including protected veterans and individuals with disabilities. Discrimination of any type will not be tolerated.

In compliance with the Americans with Disabilities Act Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position at Cushman & Wakefield, please call the ADA line at 1-888-365-5406 or email [email protected] . Please refer to the job title and job location when you contact us.

INCO: “Cushman & Wakefield”