Identity Architect

Loenbro
Worldwide Remote
Remote

Who this role is best for

Geared toward seasoned IAM professionals comfortable with Microsoft Entra ID and Zero Trust frameworks, this role favors candidates with hybrid/cloud experience and strong cross-functional collaboration skills.

Best fit for

  • Candidates with 10+ years in IAM and a history of leading enterprise identity strategies
    — “10+ years of experience in Identity and Access Management (IAM), Information Security, Infrastructure Engineering, or related disciplines.”
  • Individuals with hands-on experience in modern authentication technologies like FIDO2 and Windows Hello for Business
    — “Hands-on experience deploying and supporting FIDO2 authentication, Windows Hello for Business, and TPM-backed authentication solutions.”
  • Professionals who have successfully integrated cloud and on-premises applications with centralized identity platforms
    — “Experience integrating SaaS, cloud, and on-premises applications with centralized identity platforms.”

Things to consider

  • Occasional travel may be required despite the remote work arrangement
    — “Occasional travel may be required for company meetings, training, project activities, or other business needs.”
  • This role demands a high level of compliance and audit knowledge for regulatory frameworks
    — “Knowledge of identity-related compliance and audit requirements, including SOX, SOC, and security control frameworks.”

How to stand out

  • Highlight experience with enterprise IAM transformation and identity governance in your resume and interviews
    — “Experience with future-state identity governance, access reviews, automated provisioning, privileged access controls, and enterprise IAM transformation initiatives is highly preferred.”
  • Demonstrate your ability to architect hybrid and cloud-first identity solutions in your portfolio or case studies
    — “Experience architecting identity solutions for hybrid and cloud-first environments.”
  • Emphasize your hands-on technical leadership in Microsoft Entra ID and related tools
    — “Required: Deep expertise with Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and Hybrid Identity.”
Pace · SteadyCollaboration · HighAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • designed and implemented enterprise IAM architectures
  • deployed and supported FIDO2 authentication solutions
  • architected identity solutions for hybrid and cloud-first environments
Typical background
10+ years in IAM, Information Security, Infrastructure Engineering

Skills & requirements

Required

IAMMicrosoft Entra IDFido2Windows Hello For BusinessTpm-backed AuthenticationZero TrustSAMLOauth 2.0Openid ConnectKerberosLDAPRBACPAMSaas IntegrationCloud IntegrationOn-premises IntegrationCompliance RequirementsProject ManagementDocumentationCommunication

Preferred

Microsoft Certified Identity And Access Administrator AssociateCybersecurity Architect ExpertCisspCISM

Stack & domain

Identity And Access Management (iam)Information SecurityInfrastructure EngineeringMicrosoft Entra IDFido2 AuthenticationWindows Hello For BusinessTpm-backed AuthenticationZero Trust Security PrinciplesSAMLOauth 2.0Openid ConnectKerberosLDAPIdentity Lifecycle ManagementRole-based Access Control (rbac)Privileged Access Management (pam)Identity GovernanceAccess ReviewsAutomated ProvisioningPrivileged Access ControlsEnterprise IAMCommunicationTeamworkProblem-solvingMicrosoft Certified Identity And Access Administrator Associate (sc-300)Cybersecurity Architect Expert (sc-100)CisspCISMITSecurity

About the role

Original posting from Loenbro via Greenhouse

Job Title: Identity Architect

Company: Loenbro, LLC - IT

Business Unit/Department: Information Technology

Location: Remote

Reports to: Senior Director of Information Security

Employment Type: Full-Time

FLSA Classification: Exempt

About Loenbro

Loenbro is a trusted, long-term construction lifecycle partner to thousands of customers across the U.S. Our market spans all industries, and our service offerings include Critical Electrical, Mechanical & Structural, Soft Crafts, Inspection, Underground Maintenance and Installation, and Fabrication. Our expertise lies in simplifying the complex and establishing long-standing relationships with our partners. We have a national presence but a local approach—every customer benefits from our capabilities and our care.

At Loenbro, we don’t just offer jobs—we build careers grounded in integrity, teamwork, excellence, and purpose. Join a team where your expertise is valued, your growth is supported, and your work helps maintain and enhance the critical infrastructure that powers communities across the nation.

Job Summary

The Identity Architect is responsible for designing, implementing, and evolving the organization's enterprise identity and access management (IAM) strategy. This role will serve as the technical leader for Microsoft Entra ID, identity governance, authentication modernization, and passwordless initiatives, including TPM-backed authentication, FIDO2 security keys, and Windows Hello for Business. The Identity Architect will partner with security, infrastructure, cloud, and business teams to develop scalable identity solutions that enhance security, support compliance requirements, and improve the user experience. While initially focused on Entra ID and modern authentication technologies, the role will expand to support broader IAM, Zero Trust, privilege management, and identity governance initiatives across the enterprise. This is a hands on role.

Minimum Requirements:

10+ years of experience in Identity and Access Management (IAM), Information Security, Infrastructure Engineering, or related disciplines.

3+ years of experience designing and implementing enterprise IAM architectures.

Required: Deep expertise with Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and Hybrid Identity.

Required: Hands-on experience deploying and supporting FIDO2 authentication, Windows Hello for Business, and TPM-backed authentication solutions.

Strong understanding of Zero Trust security principles and modern authentication protocols including SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.

Experience with identity lifecycle management, role-based access control (RBAC), and privileged access management (PAM).

Experience integrating SaaS, cloud, and on-premises applications with centralized identity platforms.

Knowledge of identity-related compliance and audit requirements, including SOX, SOC, and security control frameworks.

Experience architecting identity solutions for hybrid and cloud-first environments.

Strong project management, documentation, communication, and stakeholder engagement skills.

Preferred certifications: Microsoft Certified Identity and Access Administrator Associate (SC-300), Cybersecurity Architect Expert (SC-100), CISSP, or CISM.

Experience with future-state identity governance, access reviews, automated provisioning, privileged access controls, and enterprise IAM transformation initiatives is highly preferred.

Physical Demands and Work Environment

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Work Environment:

Remote/Home Office: Primarily remote work requiring regular use of computers, virtual collaboration tools, and business applications.

Collaboration: Regular interaction with HR, IT, Business Systems, application vendors, and business stakeholders through virtual meetings and communication platforms.

Travel: Occasional travel may be required for company meetings, training, project activities, or other business needs.

This role requires compliance with all applicable safety regulations, personal protective equipment (PPE) requirements, and Loenbro's Environmental Health and Safety (EH&S) policies.

Benefits

Loenbro offers a competitive salary, comprehensive benefits package, and rewards to those who join our team:

Medical, dental, and vision insurance

401(k) retirement plan with company match

Paid time off (PTO) and holiday pay

Life and disability insurance

Professional development and training opportunities

Employee assistance program (EAP)

Benefits eligibility may vary based on employment classification and hours worked.

Guided by Core Values (LEAD), grounded in grit and a commitment to excellence, Loenbro betters our families, customers, and local communities.  If you’re ready to be part of a company that LEADS by:

Living with Integrity

Exceeding Expectations

Acting with Urgency

Delivering Excellence

…we want to hear from you.

Loenbro is an Equal Opportunity Employer

Colorado Pay Range$185,000—$200,000 USD

Source: Loenbro careers (Greenhouse)

Similar roles

More roles at Loenbro