Cloud Platform Architect, Entra – Cloud Identity

Job Description

Cloud Platform Architect | Mizuho

The Tone:
This is a full-time role at Mizuho, located in a hybrid work environment. Mizuho is the 15th largest bank in the world, offering comprehensive financial services across 35 countries. This role is crucial for owning and evolving cloud identity as a core platform capability within a highly regulated financial environment. It empowers the bank to ensure secure and compliant identity operations, enabling efficient, self-serve patterns for the platform while meeting stringent audit requirements.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: Hybrid
• Pay: $112000–$205000 yearly
• Team: Cloud Platform team
• Mission: To own cloud identity as a platform capability, making secure identity the easiest option for the platform.
• Tech Stack: Microsoft Entra ID, Conditional Access, Privileged Identity Management, Entitlement Management, Entra Connect, Cloud Sync, Managed Identities, Workload Identity Federation, Service Principal, OIDC, OAuth 2.0, SAML, PowerShell, Microsoft Graph API, Terraform, Azure Policy, Azure RBAC, Key Vault

What You’ll Actually Do
• Design and Operate: Secure and compliant identity solutions for the Azure estate using Microsoft Entra ID, aligning with regulatory and internal audit requirements, including access control and MFA provisions.
• Own and Configure: The Microsoft Entra estate, managing tenant configuration, Conditional Access, Privileged Identity Management, and entitlement management.
• Design Hybrid Identity: Solutions covering synchronization scope, attribute flow, authentication methods, cloud-only account policies, and the technical interface with directory services.
• Publish Standards: Identity standards as clear documentation, consumable patterns, reference designs, reusable Terraform modules, and paved-road configurations.
• Enforce Guardrails: Identity guardrails through Azure Policy and automation, rather than relying on manual approval processes.

The Must-Haves
• Background: 7+ years in identity or infrastructure engineering with deep, hands-on Microsoft Entra ID experience at enterprise scale, specifically within regulated financial services or a comparably regulated environment.
• Experience: Taking full ownership of an established identity estate, maturing its configuration, documentation, and controls. Proven understanding of authentication standards (OIDC, OAuth 2.0, SAML) and modern authentication policy (phishing-resistant MFA, token protection). Solid working knowledge of the broader Azure platform, including RBAC, Azure Policy, and Key Vault.
• Skills: Strong command of Conditional Access design, Privileged Identity Management, hybrid identity (Entra Connect / cloud sync), and workload identity patterns. Proficiency in scripting and automation (PowerShell, Microsoft Graph API).
• Bonus: Preferred experience with Infrastructure-as-Code. Ability to build a defensible picture of an environment before making changes, understand policy design in terms of blast radius and rollout, and make identity controls easier to follow. A commitment to recent and continuous hands-on work.