Lead Architect

Lead Architect – Identity & Access Management Architect (Microsoft Entra / Active Directory)

Location: UK Remote

Engagement Type: Permanent or Fixed-Term Contract (Full Time)

Role Overview

The Identity & Access Management Architect provides strategic and technical leadership across Microsoft Entra ID and Active Directory services. The role shapes the long-term identity architecture, owns the roadmap for hybrid identity capabilities, and acts as a senior escalation point for complex technical matters. Working closely with security, infrastructure, and regional technology teams, this position ensures identity services are secure, resilient, and aligned to business priorities.

What You’ll Be Doing as Identity & Access Management Architect role

• Designing and maintaining the architecture for Microsoft Entra ID and Active Directory across hybrid environments.
• Owning the identity services roadmap, including lifecycle management, capacity planning, and strategic direction.
• Conducting platform assessments and driving improvement initiatives in partnership with security teams and vendor specialists.
• Providing senior-level administration, governance, and incident escalation for Entra ID services.
• Developing and refining identity security controls such as Conditional Access, MFA, RBAC, PIM, and workload identity protections.
• Overseeing operational processes including monitoring, incident and change management, and service performance.
• Producing clear and comprehensive documentation to support operations, governance, and future enhancements.
• Partnering with stakeholders across technical and non-technical teams to ensure alignment and effective knowledge sharing.
• Identifying opportunities for innovation, automation, and service improvement.
• Building and maintaining productive working relationships with vendors and partners.

What We’re Looking For in the Identity & Access Management Architect

• Proven experience delivering enterprise-level identity strategy and architecture with Microsoft Entra ID.
• Minimum 5 years’ hands-on experience with Entra ID / Azure AD, including Conditional Access, MFA, PIM, RBAC, External Identities, and identity protection capabilities.
• At least 5 years’ experience managing Windows Active Directory in complex, high-availability environments.
• Strong understanding of hybrid identity models and large-scale infrastructure operations.
• Familiarity with best practices across systems administration, automation, DevOps workflows, and change management.
• Experience working within shared service or global operating models with 24/7 expectations.
• Ability to manage vendor relationships to deliver agreed outcomes and maintain value.
• Excellent communication skills and the ability to explain technical concepts to non-technical stakeholders.
• Desirable: exposure to Microsoft 365 platform architecture and experience working in cross-functional project environments.

Qualifications

• Degree or equivalent professional experience.
• Relevant Microsoft certifications in Azure and Entra ID (Azure AD) are required and must be maintained.

Why Join

• Opportunity to lead identity architecture across a complex, modern hybrid environment.
• The chance to influence long-term technology direction and introduce best-practice identity security.
• Work closely with senior technology and security leaders on business-critical initiatives.
• Engage with cutting-edge Microsoft technologies and maintain close relationships with key vendor partners.
• Be part of a dynamic setting where your expertise drives improvement, innovation, and strategic value.

If this Identity & Access Management Architect role is of interest, please submit your application for further information

Our Commitment

Entasis Partners is committed to helping clients create a diverse environment and is proud to support equal-opportunity employment. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.