10/28/2026 updated
100 % available
IAM & Microsoft Entra ID Security Architect | Freelance Consultant
Chennai, India
Only remote
Master's in Information Technology, Bharathidasan University (2007-2009)About me
Identity security architect with 15+ years in IAM, Active Directory and Microsoft Entra ID, serving banking, aerospace & defence and healthcare. I deliver MFA, Conditional Access, PIM, AD hardening and Defender for Identity – design to handover. Remote, contract-based, Europe & US.
Zero TrustIAMActive DirectoryActive Directory Federation ServicesMicrosoft AzureInformation Technology ConsultingMulti-Factor AuthenticationLightweight Directory Access Protocols (LDAP)Role-Based Access ControlSingle Sign-OnVulnerabilityDirectory SecurityCyberarkIT ArchitecturePrivileged Access Management
Identity & Access Management (IAM)
Over 15 years of hands-on delivery in IAM architecture for global clients across Aerospace & Defence, Healthcare, and Banking. Expertise in Microsoft Entra ID, Conditional Access, MFA, PIM, RBAC, ADFS, SAML, OAuth, and OIDC, covering end-to-end assessment, architecture (HLD/LLD), implementation, and documentation.
Active Directory Security & Migration
Deep expertise in Active Directory security assessments, hardening, attack-path remediation, and ransomware forest recovery. Proven track record in forest consolidation, domain decommissioning using Quest Binary Tree, M&A integrations, and ADFS farm migrations across large-scale environments of up to 250,000 users.
Privileged Access Management (PAM)
Extensive experience implementing privileged access solutions including Entra PIM with just-in-time and approval-based roles, CyberArk PAM, and access reviews. Skilled in reducing privileged access exposure and remediating identity attack paths in complex enterprise environments.
Single Sign-On (SSO) Integration
Integrated 50+ applications with Entra ID and ADFS using SAML, OAuth, and OIDC. Migrated applications between ADFS farms and enabled SSO for 250+ applications in global AD environments.
Microsoft Defender & Identity Threat Protection
Deployment and tuning of Microsoft Defender for Identity (MDI) and Defender for Endpoint (MDE), including domain controller and device onboarding, threat protection configuration, Entra ID Protection risk policies, and identity-based attack detection.
Cloud & Azure Infrastructure
Hands-on experience with Microsoft Azure, Microsoft 365, Exchange Online, and AWS IAM, including roles, policies, MFA, and federation. Delivered server migrations to Azure for data-centre moves and pre-production environment replication.
PKI & Certificate Services
Design and migration of 2-tier PKI infrastructures using AD CS and CEP/CES. Configuration of PKI for inter-forest authentication scenarios, including SAP integration.
Network & Infrastructure Management
Experience managing global MPLS VPN networks, DNS, GPO, Kerberos, LDAP, DFS, and NPS. Background in Windows Server operations, DC migrations, and tech-debt remediation across multi-branch enterprise environments.
Team Leadership & Architecture Delivery
Led delivery teams of up to 10 members across India and the US. Skilled in architecture documentation (HLD/LLD), migration planning, assessments, and stakeholder handover for complex IAM and infrastructure programmes.
Working Model
Remote, contract-based, fluent English, with flexible overlap with European and US business hours.
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluent
Project history
Deployed Microsoft Defender for Endpoint and Identity, onboarding devices and domain controllers. Implemented Entra PIM with just-in-time, approval-based and time-bound role activation. Hardened Active Directory, reducing privileged access and remediating identity attack paths. Led migration to Entra MFA and modern authentication, retiring legacy protocols and enforcing Conditional Access.
Integrated 50+ applications with Entra ID SSO; implemented CyberArk PAM and Entra PIM with RBAC and access reviews. Consolidated AD across and within forests using Quest Binary Tree; decommissioned an Exchange forest. Assessed and remediated vulnerabilities in AD and Entra ID; configured CEP PKI for inter-forest authentication to SAP.
Led a team of 10 across India and the US; designed Windows Hello for Business and Azure MFA; AD forest recovery from ransomware.