Entra ID & AD Architect

Reposted 13 Days Ago
Be an Early Applicant
2 Locations
In-Office
124K-208K Annually
Expert/Leader
Semiconductor • Manufacturing
The Role
Design, secure, and operate hybrid identity across on-prem Active Directory and Entra ID. Own architecture, incident escalation, Entra ID configuration, automation via PowerShell and Microsoft Graph, partner on identity threat detection, produce HLD/LLDs and runbooks, establish standards, and mentor engineers.
Summary Generated by Built In

About GlobalFoundries:
GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.

Summary of Role:

We are seeking a Entra ID & AD Architect (SME) driving design, security, and operations of hybrid identity. Senior individual contributor owning architecture and escalations. Delivering resilient, scalable identity in collaboration with security and cloud teams.

Essential Responsibilities:

  • Own the end-to-end architecture for hybrid identity spanning on-premises Active Directory, Entra ID, and Entra Connect / Cloud Sync.
  • Design and document target-state identity reference architectures, including authentication flows, trust topologies, forest/domain design, and tenant strategy.
  • Configure and optimize Entra ID capabilities: SSO/SAML/OIDC federation, application registrations & enterprise apps, App Proxy, B2B/B2C, dynamic groups, and Entra ID Governance (access reviews, entitlement management, lifecycle workflows).
  • Automate identity operations using PowerShell and Microsoft Graph API
  • Partner with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response for identity-based attacks (Golden Ticket, password spray, token theft, etc.).
  • Act as Tier 3 / final escalation for complex identity incidents and outages.
  • Establish standards, best practices, and guardrails; review designs from junior engineers and vendor partners.
  • Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, and architecture decision records.
  • Mentor engineers and uplift the broader team's identity capability through knowledge transfer and design reviews.

Other Responsibilities:

  • Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
  • Builds trust across security, infrastructure, app, and cloud teams; influences without authority as an individual contributor.
  • Team-first orientation — shares knowledge generously and mentors others rather than hoarding expertise.
  • Diplomatic in handling competing priorities and pushing back on insecure or non-standard requests.

Required Qualifications:

  • Education – Bachelor in Computer Science or related field.  
  • Experience – Minimum 15 Years in field.
  • Fluency in English Language – written & verbal

Preferred Qualifications:

  • Translates complex identity concepts into clear, audience-appropriate language — able to brief executives, write precise documentation, and guide hands-on engineers with equal ease.
  • Strong written skills for architecture documents, runbooks, and decision records.
  • Confident, respectful communicator in design reviews, incident bridges, and cross-team negotiations
  • Ownership mindset — treats the identity platform as their own; sees problems through to root-cause resolution rather than handing them off.
  • Proactive and self-directed; identifies risks and improvement opportunities without being asked.
  • Calm, composed, and decisive under pressure during outages and security incidents.
  • Humble and coachable — open to feedback and willing to say "I don't know, let me find out."

Expected Salary Range

$124,000.00 - $208,000.00

The exact Salary will be determined based on qualifications, experience and location.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at [email protected] and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address. 

 

An offer with GlobalFoundries is conditioned upon the successful completion of pre-employment conditions, as applicable, and subject to applicable laws and regulations. 

 

GlobalFoundries is fully committed to equal opportunity in the workplace and believes that cultural diversity within the company enhances its business potential. GlobalFoundries goal of excellence in business necessitates the attraction and retention of highly qualified people. Artificial barriers and stereotypic biases detract from this objective and may be illegally discriminatory. 

 

All policies and processes which pertain to employees including recruitment, selection, training, utilization, promotion, compensation, benefits, extracurricular programs, and termination are created and implemented without regard to age, ethnicity, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, sexual orientation, gender identity or expression, veteran status, or any other characteristic or category specified by local, state or federal law 

Skills Required

  • Bachelor in Computer Science or related field
  • Minimum 15 years experience in field
  • Fluency in English, written and verbal
  • Design and own hybrid identity architecture for Active Directory, Entra ID, Entra Connect/Cloud Sync
  • Design authentication flows, trust topologies, forest/domain design, and tenant strategy
  • Configure Entra ID features: SSO, SAML, OIDC, application registrations, enterprise apps, App Proxy, B2B/B2C, dynamic groups
  • Implement Entra ID Governance: access reviews, entitlement management, lifecycle workflows
  • Automate identity operations using PowerShell and Microsoft Graph API
  • Work with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response
  • Act as Tier 3 / final escalation for complex identity incidents and outages
  • Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, architecture decision records
  • Establish standards and review designs from junior engineers and vendor partners
  • Mentor engineers and uplift team identity capability through knowledge transfer and design reviews
  • Translate complex identity concepts for varied audiences and brief executives (preferred)
  • Strong written communication for architecture documents and runbooks (preferred)
  • Calm, decisive under pressure and ownership mindset (preferred)
  • Humble, coachable, proactive and self-directed (preferred)

GlobalFoundries Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about GlobalFoundries and has not been reviewed or approved by GlobalFoundries.

  • Healthcare Strength Comprehensive medical, dental, vision, life, disability, and mental health support is presented as a meaningful part of the package. Wellness programs and an Employee Assistance Program add to the sense of broad health coverage.
  • Retirement Support A 401(k) with matching from day one and access to an employee stock purchase program are positioned as notable financial benefits. Retirement provisions are repeatedly framed as a strong counterweight to other compensation concerns.
  • Leave & Time Off Breadth Time-off provisions are described as generous, including high annual vacation accrual, dedicated sick time, and additional personal days. Extended paid parental leave frameworks are also outlined as a substantial leave benefit.

GlobalFoundries Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Malta, NY
12,676 Employees
Year Founded: 2009

What We Do

GlobalFoundries (GF) is one of the world’s leading semiconductor manufacturers. GF is redefining innovation and semiconductor manufacturing by developing and delivering feature-rich process technology solutions that provide leadership performance in pervasive high growth markets. GF offers a unique mix of design, development, and fabrication services. With a talented and diverse workforce and an at-scale manufacturing footprint spanning the U.S., Europe and Asia, GF is a trusted technology source to its worldwide customers. For more information, visit www.gf.com. GlobalFoundries is an Equal Employment Opportunity/Affirmative Action (EEO/AA) employer Minorities/Female/Disabled/Veteran (M/F/D/V).#CB

Similar Jobs

Liberty Mutual Insurance Logo Liberty Mutual Insurance

Inside Sales Representative

Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Remote or Hybrid
10 Locations
40000 Employees
45K-85K Annually

Lansweeper Logo Lansweeper

Sales Engineer

Cloud • Information Technology • Software
Hybrid
Austin, TX, USA
404 Employees

Wells Fargo Logo Wells Fargo

Branch Manager East Houston

Fintech • Financial Services
Hybrid
Houston, TX, USA
205000 Employees

Wells Fargo Logo Wells Fargo

Customer Service Representative

Fintech • Financial Services
Hybrid
San Antonio, TX, USA
205000 Employees

Similar Companies Hiring

Fortune Brands Innovations Thumbnail
Manufacturing
Deerfield, IL
10000 Employees
Rosendin Thumbnail
Other • Manufacturing
San Jose, CA
6219 Employees
Amalgamated Sugar Thumbnail
Food • Greentech • Agriculture • Industrial • Manufacturing
Boise, Idaho
768 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account