Infrastructure Security and IAM Architect

About the role

Designs the identity, access and infrastructure security architecture for a carve-out, covering the hybrid domain controller and Entra ID estate. Owns the target-state design and the technical approach for moving users, mailboxes and collaboration content. Re-architects only where the separation requires it.

What you'll do

• Design the target identity architecture across on-premises Active Directory and Microsoft Entra ID
• Define SSO, MFA, Conditional Access and privileged access models
• Design directory synchronisation using Microsoft Entra Connect and tenant coexistence
• Architect application sign-in and federation using SAML, OAuth 2.0 and OpenID Connect
• Design network access authentication using RADIUS and 802.1X

What you need

• IAM
• Azure
• Active Directory
• AWS
• Firewalls