Cloud Solution Architect - Microsoft Entra, Active Directory & Identity Management

Job description

Job Title: Cloud Solution Architect - Microsoft Entra, Active Directory & Identity Management Job Description We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled. The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent. The Concentrix Technical Products and Services team is the driving force behind Concentrix’s transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision. Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year. Join us and be part of this journey towards greater opportunities and brighter futures.We are looking for a Cloud Solution Architect supporting enterprise and highly regulated customers across Sweden and the Nordic region. This customer-facing role requires deep expertise in Microsoft Entra ID, Active Directory, and Identity Management, including Microsoft Identity Manager (MIM), with a strong focus on designing, implementing, and troubleshooting secure identity solutions across on-premises, cloud, and hybrid environments. As a trusted technical advisor, you will be responsible for architecting and delivering modern identity and access management solutions, leading repeatable Microsoft Entra ID and Active Directory engagements, and providing expert guidance to customers throughout the design, planning, deployment, and optimization lifecycle. Key areas of expertise include Microsoft Entra ID (Conditional Access, Identity Protection, Identity Governance, and Hybrid Identity), Active Directory infrastructure, and complex identity integrations in enterprise environments. The ideal candidate is an experienced Active Directory and Cloud Engineer with a passion for infrastructure technologies and a proven track record in Active Directory and Microsoft Entra ID architecture, infrastructure design, planning, implementation, migration, and advanced technical troubleshooting. Strong knowledge of Microsoft Identity Manager (MIM) and the Windows Server platform is essential to complement the core identity skill set. Key Responsibilities: 1. Identity Architecture & Modernization Design and implement Microsoft Entra ID and hybrid identity architectures (users, groups, synchronization, authentication methods). Design Conditional Access, Identity Protection and Zero Trust identity policies aligned to customer risk and compliance requirements. Lead identity modernization from on-premises Active Directory, ADFS and MIM toward Microsoft Entra, including Entra ID Governance and Verified ID. 2. Customer Delivery & Execution Lead end-to-end delivery of Unified/EDE engagements, including Onboarding Accelerator – Entra Identity Protection and Advanced Conditional Access Policies, Onboarding Accelerator – Entra Identity Governance, On-Demand Assessment / RAP as a Service for Microsoft Entra ID, On-Demand Assessment / Offline Assessment / RAP as a Service for Active Directory and Active Directory Security, Active Directory Recovery Execution Service, Enterprise Security Assessment and WorkshopPLUS – Microsoft Entra: Hybrid Identity. Troubleshoot complex authentication, synchronization, Conditional Access, Active Directory replication, name resolution and Group Policy issues. Deliver high-quality, repeatable engagements with clear findings, remediation plans and reports. 3. Active Directory Security & Recovery Assess and harden Active Directory security (tiering, privileged access, attack-path reduction). Plan and execute Active Directory forest recovery and business continuity for identity services. 4. Identity Governance & Lifecycle Design joiner/mover/leaver processes, access reviews, entitlement management and privileged identity management with Entra ID Governance. Support Microsoft Identity Manager (MIM) operations, troubleshooting and migration to Entra ID Governance. Advise on B2B collaboration with Microsoft Entra External ID. 5. Trusted Advisor & Stakeholder Management Act as a trusted technical advisor for customers, CSAMs, SDMs and internal stakeholders. Translate business, compliance and security requirements into practical identity architecture. Communicate clearly with technical teams and customer decision makers, in English and Swedish. 6. Collaboration & Knowledge Sharing Collaborate with CSAMs, partners, engineering teams and CSA communities to deliver customer outcomes. Contribute to reusable assets, delivery IP and best practices for Entra, Active Directory and identity governance. Share knowledge within the Nordic pod to keep identity depth in the team after transition. Required Technical Skills: Target Skill Set (required) The candidate must bring hands-on, customer-delivery-level experience in all of the following skills (CSA GD skill taxonomy names): Active Directory – AD DS design, operations, security assessment, troubleshooting and forest recovery. M365 Identity – identity foundations for Microsoft 365 workloads, licensing-aware identity design and tenant hygiene. Microsoft Entra Conditional Access – policy design, authentication strengths, session controls and Zero Trust rollout. Microsoft Entra Identity Management (Users/Groups/Hybrid) – users, groups, Entra Connect / Cloud Sync and hybrid identity. Microsoft Entra Suite - ID Protection, ID Governance, Verified ID – risk-based policies, access reviews, entitlement management, PIM and Verified ID. Microsoft Identity Manager (MIM) – MIM synchronization and provisioning, operations, troubleshooting and migration to Entra ID Governance. Name Resolution – DNS design, AD-integrated DNS, name resolution for hybrid identity and troubleshooting. Windows 11 – Windows 11 identity integration (Entra join / hybrid join, Windows Hello for Business) and security configuration. Windows Client (Pre-Windows 11) – Windows 10 and earlier client domain integration, Group Policy and authentication troubleshooting. Windows Server – Windows Server platform for domain controllers and identity services: installation, operations, upgrade and troubleshooting. Windows Server File Services – file server, DFS and permissions/ACL design and troubleshooting tied to AD groups. Core Must-have Skills: strong hybrid identity experience is a must Within the target skill set, expert-level depth is required in at least 2 of the following 3: Expert-level Microsoft Entra ID security – Conditional Access, ID Protection and ID Governance design and delivery. Expert-level Active Directory – architecture, security assessment, troubleshooting and recovery. Strong Microsoft Identity Manager (MIM) and hybrid identity synchronization experience. And: Architecture design capability: able to own end-to-end identity a