09/24/2026 updated
60 % partially available
Microsoft Identity & IAM Architect | Entra ID | Active Directory | PKI | M365
Brasov, Romania
Only remote
Computer Science Studies - Currently On HoldAbout me
Microsoft Identity & IAM Architect specializing in Entra ID, Active Directory, PKI, Microsoft 365 and hybrid identity. Experienced in migrations, security hardening, architecture reviews and enterprise IAM. Available for 100% remote project-based consulting.
IAMActive DirectoryMicrosoft AzureCloud Computing SecurityExchange Web Services (EWS)Identity Management SystemsWindows ServersPublic Key InfrastructureWindows PowerShellAzure Active DirectoryMicrosoft SharePointSolution Architecture
Microsoft Identity & IAM Architect with enterprise experience across Microsoft Entra ID, Active Directory, PKI, Microsoft 365 and hybrid identity environments.
Core expertise includes:
• Microsoft Active Directory architecture, administration and service ownership
• Microsoft Entra ID / Azure AD and hybrid identity
• Identity and Access Management (IAM) architecture and governance
• Entra Connect and directory synchronization
• Active Directory security, Tier 0 hardening and privileged identity protection
• Microsoft PKI / AD CS architecture, offline Root CA and Issuing CA design
• Certificate lifecycle, authentication, CRL/CDP/AIA and certificate troubleshooting
• Microsoft 365, Exchange Online, SharePoint Online and hybrid Exchange dependencies
• Cross-tenant identity and Microsoft 365 migration architecture
• Application registrations, enterprise applications, Microsoft Graph permissions and admin consent
• Windows Server, domain controllers, Group Policy, trusts and directory services
• PowerShell-based Microsoft identity and infrastructure administration
• Identity governance, non-human identities and service accounts
• Cloud security, technical risk assessment and architecture reviews
• Hyper-V and secure infrastructure architecture
• OT Active Directory and PKI architecture
• Microsoft 365 data lifecycle, SharePoint archival and governance
I have worked as an Active Directory Service Owner, AD & Entra ID Technical Lead, Microsoft 365 Platform / Service Lead and currently as an IAM Architect & Service Owner. My experience combines hands-on engineering, architecture, technical leadership and service ownership in complex enterprise environments.
Project experience includes enterprise Active Directory hardening, identity and Microsoft 365 migrations, Entra Connect and synchronization troubleshooting, PKI and certificate services, IAM onboarding and provisioning, Microsoft 365 lifecycle management, and secure OT identity infrastructure.
Available for 100% remote engagements including architecture reviews, migrations, troubleshooting, security assessments, technical advisory and part-time consulting.
Experience
Professional experience10+ years
Freelancer since2026
Languages
GermanBasic knowledgeEnglishFluentRomanianNative speakerSpanishBasic knowledge
Project history
Contributed to the design of a secure and locally resilient OT identity architecture incorporating Active Directory, PKI, virtualization, segmentation, administrative RBAC, privileged-access considerations, logging and backup boundaries. The architecture focused on operational independence, security and local resilience.
Contributed to Microsoft PKI architecture and certificate-service operations across Active Directory and Microsoft Entra ID. Worked on two-tier PKI design, offline Root CA and Issuing CA concepts, certificate lifecycle, certificate-based authentication, synchronization issues and troubleshooting of certificate-related incidents.
Technical lead for Active Directory and Microsoft Entra ID within a complex enterprise identity and Microsoft 365 migration.
Responsibilities included identity and attribute mapping, UPN and account conflict analysis, Entra Connect dependencies, application registrations, Microsoft Graph permissions and administrative consent, Exchange-related directory prerequisites, service-account access and cross-tenant migration readiness.
Coordinated identity-related dependencies across infrastructure, messaging and migration teams and supported remediation of synchronization and target-environment readiness issues.