**Job Summary** The Directory Architect provides support implementation and design services for Directory across the enterprise. The position appropriately resolves assigned support issues and change requests as well as acts as an escalation point for support issues. Through research and collaboration with the team the position is responsible for implementing new solutions and initiatives required by the environment and the business. This role requires in-depth knowledge of Active Directory Entra ID Windo **Responsibilities** + Access Control Policies: Define access control policies and mechanisms to enforce the least privileged access principles and ensure data confidentiality integrity and availability. + Integration and Interoperability: Integrate IAM solutions with existing systems applications and directories while ensuring interoperability and seamless user experience. Compliance Ensure IAM solutions comply with relevant security standards regulations and compliance requirements such as GDPR HIPAA PCIDSS etc. + Identity Federation: Implement identity federation and single sign on SSO solutions to enable seamless access to multiple applications and services. + Authentication and Authorization Mechanisms: Design authentication and authorization mechanisms including multi-factor authentication (MFA) role-based access control RBAC and PIM + Risk Management: Assess risks related to identity and access management and implement mitigating controls to address identified risks effectively. + Identity Governance: Establish identity governance frameworks and processes to ensure proper oversight of identities access rights and compliance. + IAM Platform Evaluation: Research evaluate and recommend IAM products technologies and solutions that align with organizational needs and objectives. + Documentation and Training: Create documentation guidelines and training materials for IAM processes procedures and best practices. Define and develop a long-term IAM strategy and roadmap aligning IAM goals with business objectives and the overall security strategy. Provide expert-level guidance in IAM related security incidents helping to troubleshoot and resolve critical IAM issues when required. Managing and supporting large multi-domain multi-forest Active Directory environments. Extensive knowledge in GPOs ADFS DNS DHCP DFS and other related Microsoft technologies. Extensive knowledge in Entra ID and cloud operations including SAML federation Conditional Access PIM and etc. Deep and thorough understanding of monitoring Active Directory. Preferred Experience Experience with Entra ID and Microsoft Office 365. Experience in a global multicultural organization. Previous experience with large and small domain migrations. Ability to work well with people from difference cultures and disciplines with varying degrees of technical experience. Ability to express technical concepts effectively both verbally and in writing. Strong collaboration communication and presentation skills. Strong organizational skills with the ability to handle numerous initiatives simultaneously with a great attention to detail operating with urgency focus and discipline. Strong documentation skills on policies process and procedures. Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.