Microsoft Entra ID & CloudGate Migration_Security Specialist

IAM Architect / Lead Consultant (Microsoft Entra ID & CloudGate Migration):

Seeking an experienced Global Tenant-to-Tenant IAM Architect with strong Microsoft Entra ID expertise to lead discovery, assessment, solution design, implementation, and migration activities for a global identity transformation program. The consultant will assess the current Entra ID environments, evaluate migration options to CloudGate IDP, configure Entra ID, identify risks, and provide strategic recommendations for large-scale identity modernization initiatives involving more than 50,000 identities.

Key Responsibilities

• Lead IAM discovery workshops and stakeholder engagements.
• Assess existing identity architecture, authentication flows, application integrations, and dependencies.
• Design target-state architecture and migration strategy.
• Evaluate Entra ID to CloudGate IDP migration feasibility, including feature mapping, gap analysis, and coexistence approach.
• Design and implement Entra ID solutions, including:
• SSO, Federation, MFA
• Conditional Access
• Identity Governance
• Access Reviews
• Entitlement Management
• Provisioning and Lifecycle Management
• Enterprise Application Integrations
• Assess Microsoft 365 identity and workload impacts.
• Identify migration risks, assumptions, dependencies, and mitigation plans.
• Develop assessment reports, architecture documents, migration roadmaps, and runbooks.
• Support testing, pilot execution, cutover planning, and hypercare.
• Present recommendations and implementation plans to customer and Fujitsu stakeholders.

Required Skills

• 8+ years of IAM experience.
• Strong hands-on expertise in Microsoft Entra ID (Azure AD).
• Experience implementing and configuring Entra ID security and identity services.
• Proven experience with IAM platform migrations, tenant consolidations, or identity transformation programs.
• Strong knowledge of:
• SSO, Federation, SAML, OAuth 2.0, OIDC
• SCIM Provisioning
• MFA and Conditional Access
• Identity Governance, Access Reviews, Entitlement Management
• Privileged Identity Management (PIM)
• Experience integrating enterprise applications with identity providers.
• Strong understanding of Microsoft 365 identity architecture and migration impacts.
• Experience with large-scale environments (50,000+ identities preferred).
• Customer-facing consulting, architecture, documentation, and presentation experience.

Preferred Skills

• Experience with CloudGate IDP or similar IAM platforms such as Okta, SailPoint, Ping Identity, ForgeRock, One Identity, or CyberArk Identity.
• Experience performing feature parity and capability assessments between Entra ID and third-party IAM platforms.
• Experience designing hybrid identity architectures involving AD, Entra ID, and third-party IDPs.
• Experience migrating SSO-integrated and provisioned applications between identity platforms.

Mandatory Experience

• Global identity transformation, tenant consolidation, merger/divestiture, or IAM migration programs.
• Multi-geo and multinational customer environments.
• Hands-on experience implementing Microsoft Entra ID services in production environments using various migration tools.
• Migration assessments between Entra ID and third-party IAM/IDP platforms.
• Assessment of migration impacts across Microsoft 365, Federation, MFA, Conditional Access, Identity Governance, Provisioning, Lifecycle Management, and Privileged Access.
• Production of executive-level assessment reports, migration roadmaps, and implementation recommendations.
• Demonstrated experience in both Entra ID implementation and identity platform migration projects, including feature parity assessments, migration planning, coexistence strategies, governance, security controls, and application integration impacts.