Identity Architect - Hybrid London

London Source: WhatJobs

See advert for pay

Overview

In this role you will design and govern the identity and directory foundation for a major transformation programme. You will lead an Entra ID–driven strategy, balancing existing estate with a target architecture and a controlled transition plan. You will define lifecycle, authentication, and access patterns, plus governance across hybrid environments. Your work will directly influence the organisation's secure identity landscape and future consolidation path. This is an opportunity to shape critical technology amid a complex transformation in collaboration with cross‑functional teams.

Pay / Benefits

Autonomy to develop and grow your skills and experience
Exciting project work making a difference in society
Strong, inspiring leadership
Supportive and collaborative environment
LinkedIn Learning and training
Flexible working including home working

Responsibilities

Define current-state, coexistence, transition, and target-state identity architectures with a clear roadmap
Lead Entra ID architecture, including tenant config, identity synchronization, authentication, federation, domains, and integration with directory services
Define secure hybrid identity patterns enabling legacy and new cloud services to coexist
Design identity lifecycle management across joiner/mover/leaver, provisioning, deprovisioning, synchronization and access governance
Establish authentication and access patterns including MFA, Conditional Access, federation and application authentication
Define external identities, service accounts and non-human identities requirements
Design privileged-access controls including break-glass accounts and separation of duties
Define future strategy for Active Directory Domain Services, including domains, forests, trusts and GPO dependencies
Assess existing Active Directory estate for debt and dependencies and plan consolidation when prerequisites exist
Own DNS and namespace architecture to support secure, reliable hybrid operation
Define enterprise application integration patterns and relevant standards

Key requirements

Deep architecture experience with Microsoft Entra ID, Active Directory Domain Services and hybrid identity
Strong knowledge of Entra Connect or Cloud Sync, authentication methods, federation, MFA and Conditional Access
Experience with multi-tenant coexistence, tenant/domain migrations and AD consolidation
Strong DNS, namespace, trusts, GPO, privileged-access and directory-security knowledge
Understanding of SAML, OpenID Connect, OAuth, SCIM and enterprise application integration
Ability to produce HLD/LLD artefacts, transition designs, decision records and migration patterns
Strong security judgement, troubleshooting ability and stakeholder communication