Identity Engineer (Windows Hello for Business)

Role: Identity Architect (Windows Hello for Business) Location: US or Costa Rica Role Overview The IAM Solution Architect – Passwordless & WHfB will lead the design and implementation of modern authentication solutions across the enterprise.

This role focuses on assessing the current identity landscape, architecting Windows Hello for Business and passwordless strategies, integrating with Microsoft Entra ID and Intune, and guiding large‑scale rollout and operational readiness.

The architect will ensure security, compliance, and user experience are optimized while providing clear documentation, technical leadership, and cross-team enablement.

Architecture & Design Assess current identity and authentication posture (password policies, MFA, PKI, hybrid join, device management).

Recommend the appropriate Windows Hello for Business (WHfB) trust model (Cloud Kerberos, Hybrid Key, Hybrid Certificate) and define migration paths.