Microsoft SSPR

Identity Authentication Architect Microsoft SSPR & Hybrid Identity

Role Overview

Seeking an expert Identity Authentication Architect to design, implement, and optimize Microsoft Azure AD Self-Service Password Reset (SSPR) solutions in large-scale hybrid environments. The role focuses on secure, scalable identity architecture aligned with Zero Trust, MFA, and passwordless strategies.

Key Responsibilities

• Architect and lead enterprise SSPR solutions for multi-forest, hybrid Active Directory environments (10,000+ users)
• Design identity roadmaps integrating SSPR, MFA, Conditional Access, and passwordless authentication
• Implement Azure AD SSPR, password writeback, and Azure AD Connect (HA/DR)
• Integrate SSPR with Azure AD Password Protection, Identity Protection, and smart lockout
• Develop automation and reporting using PowerShell, Microsoft Graph, Azure Monitor, and Log Analytics
• Ensure compliance with GDPR, HIPAA, SOC 2, ISO 27001
• Monitor, troubleshoot, and optimize SSPR adoption, security, and user experience
• Lead security reviews and incident response related to identity and password reset events

Required Experience & Skills

• 7+ years with Microsoft Identity (AD, Azure AD, Azure AD Connect)
• 4+ years implementing Azure AD SSPR in enterprise environments
• Strong expertise in hybrid identity, multi-forest AD, and password writeback
• Advanced knowledge of Conditional Access, MFA, and Zero Trust
• Proficient in PowerShell and Microsoft Graph API
• Strong understanding of authentication protocols (Kerberos, SAML, OAuth, OIDC)
• Experience with identity security, compliance frameworks, and audit logging

Preferred Skills

• Azure AD B2B/B2C, PIM, SIEM integration (Sentinel/Splunk)
• Federated identity (ADFS, Okta, Ping)
• Passwordless auth (FIDO2, WHfB, TAP)
• Defender for Identity and large-scale identity migrations
• Sovereign cloud environments (GCC/GCC High)

Core Technologies

Azure AD (P1/P2), Azure AD Connect, SSPR, Conditional Access, Azure Monitor, Log Analytics, PowerShell, Microsoft Graph, Windows Server, Active Directory

If anyone interested please contact us at