clifford Mensah
@cliffordmensah
Senior Identity & Access Architect delivering Zero Trust, Entra ID/Active Directory security at enterprise scale.
FranceWhat I'm looking for
I am a Senior Identity & Access Architect with 16+ years securing enterprise environments across global organisations, driving Entra ID/Active Directory migrations, Zero Trust adoption, privileged access protection and automation. I've modernized authentication estates, onboarded 300+ applications and protected 10k+ identities while delivering measurable improvements such as a 30% reduction in provisioning errors.
I specialize in Entra ID/Azure AD, ESAE Tiering, MFA/Conditional Access, PAM/IGA alignment and PowerShell/Graph automation, and I am trusted for international delivery, C-suite alignment and rapid execution on critical identity programs. I am immediately available for full-remote, long-term engagements across Mexico, EU, US, Canada and France.
Experience
Work history, roles, and key accomplishments
Senior IAM Architect
Amer Sports
Jan 2025 - Aug 2025 (7 months)
Modernized authentication estate across global brands, integrated One Identity Manager & Safeguard with Entra ID, and reduced MFA risk exposure while delivering IAM dashboards and automation for 3,000+ applications.
KPDefined cloud identity and Zero Trust roadmap, improved MFA and conditional access programs, and designed One Identity Manager role models and PAM integration supporting unified IGA+PAM governance.
AD Lead & Service Delivery
Nexans
Apr 2023 - Apr 2024 (1 year)
Led multi-domain AD to Entra migrations, deployed conditional access and Secret ID rollout, and implemented lifecycle automation and PAM integration securing 10,000+ identities across global hybrid infrastructure.
AD / M365 Security Engineer
Proservia
Jun 2021 - Mar 2023 (1 year 9 months)
Executed Azure AD migration for 10,000 users, upgraded PTA, rolled out MFA and B2B federation, and tuned AADConnect to reduce provisioning errors by 30% while supporting One Identity deployments.
Azure AD Engineer
Murex
Oct 2020 - Jun 2021 (8 months)
Implemented RBAC/ABAC governance and MFA/conditional access for critical applications, and enabled secure B2B/B2C collaboration to strengthen access controls.
AD Security Engineer
Heineken
Jul 2019 - Sep 2020 (1 year 2 months)
Hardened MFA, conditional access, and SSO for enterprise applications, implemented DKIM/DMARC mail security, and mitigated Golden Ticket risks across Active Directory.
AD Security (ESAE)
Sanofi
Mar 2018 - Mar 2019 (1 year)
Established ESAE Tier0 foundation, deployed PAW and BitLocker, and led enterprise MFA rollout and DR planning for multi-forest Active Directory environments.
Managed Active Directory, ADFS, ADRMS and Windows deployment projects, delivering Windows 10 master images, MDT/SCCM automation, and VoIP/security hardening for enterprise clients.
Education
Degrees, certifications, and relevant coursework
Microsoft
Professional Certification (SC-300), Identity and Access Management
Enrolled in Microsoft SC-300 certification (in progress) focused on identity and access management.
ESIEE / 3IS
Engineering Degree, Computer Science & Multimedia
2003 - 2006
Engineering degree in Computer Science & Multimedia completed in 2006 at ESIEE / 3IS.
Microsoft (ESAE / AD Tiering / Zero Trust courses)
Professional Training, Identity Security / Zero Trust
Completed Microsoft ESAE, Active Directory tiering, and Zero Trust coursework for enterprise identity security.
Availability
Location
FranceAuthorized to work in
Job categories
Skills
Interested in hiring clifford?
You can contact clifford and 90k+ other talented remote workers on Himalayas.
Message cliffordFind your dream job
Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!
