Location: US or Costa RicaRole Overview
The IAM Solution Architect – Passwordless & WHfB will lead the design and implementation of modern authentication solutions across the enterprise. This role focuses on assessing the current identity landscape, architecting Windows Hello for Business and passwordless strategies, integrating with Microsoft Entra ID and Intune, and guiding large‑scale rollout and operational readiness. The architect will ensure security, compliance, and user experience are optimized while providing clear documentation, technical leadership, and cross-team enablement.
Architecture & Design- Assess current identity and authentication posture (password policies, MFA, PKI, hybrid join, device management).
- Recommend the appropriate Windows Hello for Business (WHfB) trust model (Cloud Kerberos, Hybrid Key, Hybrid Certificate) and define migration paths.
- Design integrations with Microsoft Entra ID, Active Directory, Intune, Conditional Access, Identity Protection, and Defender for Endpoint.
- Define device provisioning and compliance requirements (Autopilot, VDI, TPM, HSTI) and establish backup/recovery strategies.
- Configure WHfB policies (Intune/GPO), Authentication Methods, and Conditional Access for passwordless authentication.
- Implement or integrate PKI components, certificate templates, CRLs/AIA, and support smart card migration/ADFS deprecation where needed.
- Run pilots, evaluate results, and manage phased rollouts across regions and device types.
- Validate SSO/Kerberos flows to on‑prem resources and establish monitoring via Entra logs, Intune reporting, and Log Analytics.
- Build runbooks, break‑glass steps, and tiered support workflows.
- Diagnose WHfB issues (TPM/attestation, PIN reset, dsregcmd, trust model anomalies).
- Optimize user experience, authentication performance, and fallback MFA posture.
- Align solutions with NIST 800‑63/800‑53, ISO 27001, and phishing‑resistant authentication best practices.
- Ensure IAM policies meet governance, audit, and risk‑mitigation requirements.
- Produce HLD/LLD documentation, migration plans, test/UAT guides, and support FAQs.
- Deliver training and communication materials for admins, helpdesk teams, and end users.
Why Simeio?: Simeio is a global managed services provider offering Identity and Access Management solutions delivered as a service and interoperable with leading IAM tools. With 700+ employees worldwide, Simeio secures over 160 million identities globally for large enterprises and government entities.
Services and solutions from Simeio include Customer Identity & Access Management, Privileged Access Management, Identity Proofing, Access Management & Federation, Identity Governance & Administration, Application Onboarding, and Simeio Identity Orchestrator. The company has been recognized for its business and technical leadership and highly rated by Gartner, Forrester, and KuppingerCole, and was ranked by Great Places to Work®. For more information visit simeio.com
Similar Jobs
.jpg)
What We Do
Customers of all sizes globally rely on Simeio to help secure their organizations. An innovative and industry leader, Simeio offers professional services, Identity and Access Management (IAM) managed services and Identity as a Service (IDaaS). Its full range of services is powered by an industry-first IAM Virtualization Platform delivered via Simeio's Identity SOC. Simeio's Identity SOC is the first and only solution of its kind designed specifically to operate, monitor, and defend complex multi-vendor IAM infrastructures and deliver actionable business intelligence. Simeio's client base is expanding as interest in identity and access management and IT governance, risk and compliance grows across all sectors. Headquartered in Atlanta, Georgia, Simeio has operations in India, the United Kingdom, Europe, across North America, South America and Canada. We are a cutting-edge growing company with a strong dedication to our employees and their opportunity for growth and success. Simeio offers a state-of-the-art technology office with plans for continued growth and expansion. Our company culture is crucial to those driven for success with an entrepreneurial spirit, solution oriented, and individual contributors, as well as, team players.
.png){kind=logo}
