Identity Architect

About the role

We are looking for an Identity Architect to join a large‑scale Microsoft enterprise environment on a contract basis. The role will shape the identity architecture as the organisation migrates workloads to the cloud, ensuring secure and coherent access management for both workforce and customer platforms.

Key responsibilities

• Design and maintain IAM architecture covering workforce (WIAM) and customer (CIAM) identities across hybrid and cloud environments.
• Establish privileged access controls, identify and remediate toxic access combinations and Separation of Duties conflicts.
• Define integration patterns and manage hybrid identity posture during cloud migration.
• Design SSO and federation solutions using SAML 2.0, OAuth 2.0 and OIDC for enterprise and customer‑facing applications.
• Own identity lifecycle management (JML) and implement proportionate access certification reviews.

Required profile

• Minimum 8 years of commercial experience in IAM architecture, with responsibility for both WIAM and CIAM solutions.
• Bachelor’s degree in a relevant field.
• Proven ability to deliver secure identity solutions in large Microsoft‑centric environments.

Required skills

• Microsoft identity stack: Entra ID, Active Directory, Azure RBAC, Microsoft 365.
• Identity protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP.
• Privileged access management and toxic access remediation.
• Familiarity with IGA platforms such as SailPoint and CIAM platforms like Optimal.