Senior Solutions Architect (Authentication & Identity)

Introduction

Our client is looking for a Senior Solutions Architect to lead end-to-end solution architecture for the Identity Unification Programme across identity, directory services, authentication, access governance, and integrations. Ensure solutions are secure, auditable, cost-effective, and aligned to enterprise architecture and security standards, while enabling efficient delivery with minimal risk.

Duties & Responsibilities

• Identity & Directory Architecture: Define target and transition states for AD/directory services (including consolidation), OU structures, identity standards, and migration wave strategies with clear acceptance criteria.

• Authentication & Identity Governance: Design authentication aligned to Microsoft Entra ID (Conditional Access, PIM, MFA, passwordless) and define RBAC/ABAC models and lifecycle processes (joiner/mover/leaver) using tools like Sail

Point.

• Integration & Provisioning: Establish SCIM/API-based provisioning patterns, application onboarding standards, and authentication migration approaches (SAML/OIDC/legacy), ensuring dependencies are mapped and managed.

• Security, Risk & Compliance: Embed Zero Trust principles, enforce least privilege, and ensure auditability. Conduct risk assessments, document mitigations, and ensure designs meet regulatory and audit requirements.

• Governance & Assurance: Produce architecture artefacts (HLD/LLD), maintain decision logs/ADRs, support design forums, and provide assurance across build and test phases, including vendor oversight.

• Delivery Enablement: Partner with programme teams to define scope, sequencing, and acceptance criteria; support operational readiness (runbooks, support models, Day-2); and align with change management.

Desired Experience & Qualification

Required Experience & Skills

• 10+ years in solution architecture with strong focus on identity, directory services, and access governance in regulated environments

• Proven experience delivering identity transformation programmes, including migration strategies and architecture documentation

• Strong knowledge of AD consolidation, Microsoft Entra ID, Conditional Access, PIM, MFA/passwordless, and identity governance (e.g., Sail

Point)

• Strong stakeholder management, communication, and risk-based decision-making

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or equivalent

• TOGAF (preferred)

• Relevant security/identity certifications (e.g., Microsoft, CISSP, CISM) advantageous