GlobalFoundries
Entra ID & AD Architect
- Compensation
- Not disclosed
- Location
- Austin
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 15+ years
- Category
- Architecture
- Posted
Skills
Must have
- Education – Bachelor in Computer Science or related field.
- Experience – Minimum 15 Years in field.
- Fluency in English Language – written & verbal
Nice to have
- Translates complex identity concepts into clear, audience-appropriate language — able to brief executives, write precise documentation, and guide hands-on engineers with equal ease.
- Strong written skills for architecture documents, runbooks, and decision records.
- Confident, respectful communicator in design reviews, incident bridges, and cross-team negotiations
- Ownership mindset — treats the identity platform as their own; sees problems through to root-cause resolution rather than handing them off.
- Proactive and self-directed; identifies risks and improvement opportunities without being asked.
- Calm, composed, and decisive under pressure during outages and security incidents.
- Humble and coachable — open to feedback and willing to say "I don't know, let me find out."
Full description
About GlobalFoundries:
GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.
Summary of Role:
We are seeking a Entra ID & AD Architect (SME) driving design, security, and operations of hybrid identity. Senior individual contributor owning architecture and escalations. Delivering resilient, scalable identity in collaboration with security and cloud teams.
Essential Responsibilities:
- Own the end-to-end architecture for hybrid identity spanning on-premises Active Directory, Entra ID, and Entra Connect / Cloud Sync.
- Design and document target-state identity reference architectures, including authentication flows, trust topologies, forest/domain design, and tenant strategy.
- Configure and optimize Entra ID capabilities: SSO/SAML/OIDC federation, application registrations & enterprise apps, App Proxy, B2B/B2C, dynamic groups, and Entra ID Governance (access reviews, entitlement management, lifecycle workflows).
- Automate identity operations using PowerShell and Microsoft Graph API
- Partner with SecOps on identity threat detection (Entra ID Protection, Defender for Identity) and incident response for identity-based attacks (Golden Ticket, password spray, token theft, etc.).
- Act as Tier 3 / final escalation for complex identity incidents and outages.
- Establish standards, best practices, and guardrails; review designs from junior engineers and vendor partners.
- Produce high-quality documentation: HLDs/LLDs, runbooks, knowledge articles, and architecture decision records.
- Mentor engineers and uplift the broader team's identity capability through knowledge transfer and design reviews.
Other Responsibilities:
- Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
- Builds trust across security, infrastructure, app, and cloud teams; influences without authority as an individual contributor.
- Team-first orientation — shares knowledge generously and mentors others rather than hoarding expertise.
- Diplomatic in handling competing priorities and pushing back on insecure or non-standard requests.
Required Qualifications:
- Education – Bachelor in Computer Science or related field.
- Experience – Minimum 15 Years in field.
- Fluency in English Language – written & verbal