Job description

About Slalom Slalom is a global business and technology consulting company committed to helping people and organizations dream bigger, move faster, and build better tomorrows. Our Microsoft Security organization brings together deep expertise across Microsoft's security, identity, data protection, compliance, cloud, and AI security ecosystem. We are building a differentiated Microsoft Security practice focused on helping clients transform how they protect their identities, data, devices, applications, cloud environments, and AI-enabled enterprises. About the Role We are seeking a Senior Consultant or Principal – Microsoft Security, Identity & Access Architecture to help lead Slalom's established Entra Suite and hybrid identity capability. This is a senior technical leadership role for an experienced Microsoft identity practitioner who combines deep technical expertise across Microsoft Entra, Active Directory Domain Services, and hybrid identity infrastructure, including Microsoft's frontier identity landscape of Microsoft Agent 365 and Entra Agent ID governing non-human and AI agent identities, with enterprise and security architecture, consulting leadership, business development, and Microsoft ecosystem experience. You will be responsible for leading and growing this already-established capability: owning the technical vision, evolving existing offerings and intellectual property, deepening client relationships, partnering with Microsoft, supporting sales pursuits, and mentoring junior team members so the capability continues to scale across Slalom. This is not simply an implementation role. You will lead the capability, sell the capability, deliver the capability, and develop the junior consultants who will scale it. What You'll Do Support Microsoft Identity Capabilities • Contribute to Slalom's Identity & Access Architecture capabilities across the full Entra Suite, hybrid AD, and Microsoft Agent 365/Entra Agent ID. • Support the capability's technical strategy, offerings, delivery methodology, and roadmap. • Maintain reference architectures, accelerators, and playbooks. • Uphold technical standards: Zero Trust identity, tiered administration/Enterprise Access Model, AD DS hardening, Conditional Access and PIM by default, documented hybrid trust with break-glass procedures, and governed PKI. Build Microsoft Relationships • Maintain strong relationships across the Microsoft Security and Identity field organization. • Track the Entra roadmap and emerging hybrid identity capabilities. • Support Microsoft partner programs and represent Slalom at Microsoft and industry events. Mentor and Grow the Team • Mentor junior and mid-level consultants across cloud identity and AD DS disciplines. • Coach through hands-on project work, shadowing, and technical review. • Guide skill development, certifications, and career paths. Deliver Client Outcomes • Lead complex identity transformations from strategy through operationalization. • Assess AD DS forests and Entra tenants; lead modernization and consolidation roadmaps. • Implement Entra ID Governance, Conditional Access, PIM, Verified ID, and AD DS hardening. • Help clients move from legacy AD-centric identity to a sustainable hybrid, cloud-first model. Required Qualifications Microsoft Identity Expertise • Advise CISOs, CIOs, and enterprise architects on modernizing identity and access management. • Deep, hands-on expertise across: • Entra ID, Entra ID Governance, Permissions Management, Verified ID, Workload ID, Private Access, and Internet Access • AD DS: forest/domain design, trusts, Group Policy, DNS, and DHCP • Hybrid identity: Entra Connect Sync/Cloud Sync, PHS/PTA, Seamless SSO, and hybrid/Entra join • AD FS and federation migration to Entra ID • AD CS and PKI • Defender for Identity • Microsoft Agent 365/Entra Agent ID: Agent Identity Blueprints, Blueprint Principals, Agent Identities, and AI Teammate accounts • Azure identity: RBAC, managed identity/workload identity federation, and Key Vault access policies • Strong grasp of Conditional Access, PIM, and Zero Trust access models. • Experience leading AD-to-Entra migrations and AD DS modernization/consolidation. • Strong understanding of Kerberos, NTLM, LDAP, and directory hardening. Architecture • Demonstrated experience developing enterprise identity architectures. • Experience leading architecture decisions across complex, multi-forest/multi-tenant environments. • Ability to communicate architecture to both executives and engineers. Consulting & Leadership • Experience leading complex identity transformation programs at the CISO/CIO level. • Demonstrated experience leading multidisciplinary technical teams. • Strong executive communication skills and experience mentoring identity professionals. About Us Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries partner with clients to co-create powerful customer experiences, modern ways of working, and meaningful impact.  What sets us apart? We believe work should be challenging and fulfilling, not perfect, but possible. That’s why we prioritize purpose, flexibility, connection, and recognition, so our people can thrive and love what they do, most days.    Compensation and Benefits Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.   Slalom is committed to fair and equitable compensation practices. For this role, we are hiring at the following levels and targeted base pay salary ranges:  The targeted base salary pay range for Senior Consultant in Houston, Boston, Washington DC is $136,500 to $169,500. The target base salary range for Principal in Houston, Boston, Washington DC is $151,000-$187,500 . The targeted base salary pay range for Principal in all other US markets (except Northern California) is $125,000 to $155,500. The target base salary range for Principal in all other US locations (except Northern California) is $138,500-$172,000.   In addition, individuals may be eligible for an annual discretionary bonus .  Actual compensation will depend upon an individual’s skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.     We will accept applicants until 11/4/2026, or until the position is filled. We are committed to pay transparency and compliance with applicable laws. If you have questions or concerns about the pay range or other compensation information in this posting, please contact us at:  peopleone@slalom.com . Please note, this recipient is not able to support recruitment inquiries beyond this purpose.   EEO and Accommodations Slalom is an equal opportunity employer and is committed to attracting, developing and retaining highly qualified talent who empower our innovative teams through unique perspectives and experiences. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans’ status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team or contact  accomodationrequest@slalom.com  if you require accommodations during the interview process. Locations: Atlanta, GA; Austin, TX; Baltimore, MD; Boston, MA; Charlotte, NC; Chicago, IL; Cincinnati, OH; Cleveland, OH; Columbus, OH; Dallas, TX; Denver, CO; Detroit, MI; Houston, TX; Kansas City, MO; Las Vegas, NV; Miami, FL; Minneapolis, MN; Nashville, TN; Philadelphia, PA; Phoenix, AZ; Portland, OR; Raleigh, NC; Salt Lake City, UT

Requirements

Must-haves

We are seeking a Senior Consultant or Principal – Microsoft Security, Identity & Access Architecture to help lead Slalom's established Entra Suite and hybrid identity capability.
This is not simply an implementation role. You will lead the capability, sell the capability, deliver the capability, and develop the junior consultants who will scale it.
Support Microsoft Identity Capabilities
Contribute to Slalom's Identity & Access Architecture capabilities across the full Entra Suite, hybrid AD, and Microsoft Agent 365/Entra Agent ID.
Support the capability's technical strategy, offerings, delivery methodology, and roadmap.
Maintain reference architectures, accelerators, and playbooks.
Build Microsoft Relationships
Maintain strong relationships across the Microsoft Security and Identity field organization.
Track the Entra roadmap and emerging hybrid identity capabilities.
Support Microsoft partner programs and represent Slalom at Microsoft and industry events.
Mentor and Grow the Team
Mentor junior and mid-level consultants across cloud identity and AD DS disciplines.
Coach through hands-on project work, shadowing, and technical review.
Guide skill development, certifications, and career paths.
Deliver Client Outcomes
Lead complex identity transformations from strategy through operationalization.
Assess AD DS forests and Entra tenants; lead modernization and consolidation roadmaps.
Implement Entra ID Governance, Conditional Access, PIM, Verified ID, and AD DS hardening.
Help clients move from legacy AD-centric identity to a sustainable hybrid, cloud-first model.
Microsoft Identity Expertise
Advise CISOs, CIOs, and enterprise architects on modernizing identity and access management.
Entra ID, Entra ID Governance, Permissions Management, Verified ID, Workload ID, Private Access, and Internet Access
AD DS: forest/domain design, trusts, Group Policy, DNS, and DHCP
Hybrid identity: Entra Connect Sync/Cloud Sync, PHS/PTA, Seamless SSO, and hybrid/Entra join

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazureagile

Platform: slalom
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave