• Lead the migration of all SSO, MFA, and Conditional Access policies from Okta to Microsoft Entra ID • Architect and implement BeyondTrust to establish Tier-0 privileged access controls across newly acquired AD forests and cloud environments • Serve as the internal technical authority and design reviewer for the MSP’s Entra ID tenant configuration, ensuring governance standards, naming conventions, and security defaults align with long-term strategy • Lead the technical hand-off and integration of standalone Active Directory forests into the new Entra ID tenant • Design and enforce zero-trust identity principles across authentication, authorization, and privileged access management • Develop PowerShell and Microsoft Graph API automation to streamline identity lifecycle management, governance controls, and reporting • Define and document identity architecture, authentication flows, access models, and governance frameworks • Partner with infrastructure, security, and compliance stakeholders to ensure enterprise-wide alignment with security standards • Provide strategic guidance to executive and technical leadership on identity and security decisions