Identity & Access Management Architect

About the role

We are seeking an experienced Identity & Access Management Architect to design and drive a global identity and access strategy for a leading international professional services firm. This senior, hands‑on role will influence enterprise‑wide security architecture, modernise identity governance and embed zero‑trust principles across a complex global environment.

Key responsibilities

• Develop and maintain the firm’s IAM architecture, covering identity lifecycle, access governance and privileged access controls.
• Integrate multi‑factor authentication with biometric and mobile device capabilities to enhance security and user experience.
• Champion identity threat detection and response solutions to proactively mitigate identity‑based attacks.
• Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and define Conditional Access policies aligned with Microsoft best practices.
• Architect and enhance Privileged Access Management (PAM) capabilities, including approval workflows and continuous monitoring.
• Collaborate with Security to create Azure Policies and guardrails supporting audit readiness and remediation.
• Oversee Conditional Access deployment and risk‑based authentication across the global estate.

Required profile

• Proven experience as an IAM Architect or Security Architect with a strong focus on Identity and Access Management.
• Background working in large‑scale global environments, preferably within professional services.
• Deep expertise in Microsoft identity and security, including advanced Entra ID/Azure AD and on‑prem Active Directory.
• Relevant industry certifications such as CISSP.
• Strong experience with Azure and Azure‑based security services.
• Extensive knowledge of SSO and authentication protocols: OpenID Connect, SAML, OAuth, Kerberos, LDAP.

Required skills

• Microsoft Entra ID / Azure AD
• Active Directory (on‑prem)
• Azure cloud platform
• Conditional Access
• Azure Policies
• Privileged Access Management (PAM)
• Multi‑factor Authentication (MFA) with biometric and mobile support
• Identity threat detection and response
• OpenID Connect
• SAML
• OAuth
• Kerberos
• LDAP

What we offer

• Opportunity to shape identity and access strategy at a global scale.
• Work at the intersection of IAM, security and infrastructure architecture.
• Exposure to modern identity technologies such as zero‑trust, ITDR and password‑less authentication.
• Collaborative, inclusive culture with strong investment in professional development.
• Hybrid working model: three days in the office, two days remote.