Identity Architect – Microsoft IAM Contract

About the role

We are looking for an experienced Identity Architect to join a large‑scale Microsoft enterprise environment on a contract basis. The role will shape the integration of information systems during an active cloud migration, ensuring secure and coherent identity management for both workforce and customer platforms.

Key responsibilities

• Design and maintain IAM architecture for workforce (WIAM) and customer (CIAM) identities across hybrid and cloud environments.
• Establish privileged access controls, remediate toxic access combinations and resolve Separation of Duties conflicts.
• Define integration patterns and manage hybrid identity posture as workloads transition to the cloud.
• Design SSO and federation solutions using SAML 2.0, OAuth 2.0 and OIDC for enterprise and customer‑facing applications.
• Own identity lifecycle management (JML) and implement proportionate access certification reviews.

Required profile

• Extensive commercial experience delivering IAM solutions for both WIAM and CIAM contexts.
• Deep knowledge of the Microsoft identity stack, including Entra ID, Active Directory, Azure RBAC and Microsoft 365.
• Proven ability to design privileged access controls at enterprise scale.

Required skills

• Entra ID
• Active Directory
• Azure RBAC
• Microsoft 365
• SAML 2.0
• OAuth 2.0
• OIDC
• SCIM
• LDAP
• SailPoint (IGA platform)
• Optimal (CIAM platform)