Identity Architect

• Define current-state, coexistence, transition and target-state identity architectures
• Provide a clear roadmap from the existing environment to the future operating model
• Lead Entra ID architecture, including tenant configuration, identity synchronisation, authentication, federation, domains, administrative boundaries and directory-service integration
• Define secure hybrid identity patterns for existing and newly introduced cloud and target services
• Design identity lifecycle management covering joiner, mover and leaver processes, provisioning, deprovisioning, synchronisation and access governance
• Establish authentication and access patterns, including modern authentication, MFA, Conditional Access, federation and application authentication
• Define approaches for external identities, service accounts, non-human identities and specialist identity requirements
• Design privileged-access controls, including break-glass accounts, delegated administration, administrative boundaries and separation of duties
• Define the future Active Directory Domain Services strategy, including domains, forests, organisational units, trusts, Group Policy dependencies, legacy authentication and administrative models
• Assess the existing Active Directory estate, technical debt, application dependencies, operational constraints and simplification opportunities
• Develop a pragmatic, risk-managed roadmap toward future Active Directory consolidation
• Own DNS and namespace architecture, including name resolution, DNS forwarding, service discovery, namespace integration and environment dependencies
• Ensure DNS and directory designs support secure, reliable hybrid-environment operation
• Define enterprise application integration patterns using technologies and standards

Requirements

• Deep architecture experience with Microsoft Entra ID, Active Directory Domain Services and hybrid identity
• Strong knowledge of Entra Connect or Cloud Sync, authentication methods, federation, MFA and Conditional Access
• Experience of multi-tenant coexistence, tenant/domain migrations and Active Directory consolidation
• Strong DNS, namespace, trusts, GPO, privileged-access and directory-security knowledge
• Understanding of SAML, OpenID Connect, OAuth, SCIM and enterprise application integration
• Ability to produce HLD/LLD artefacts, transition designs, decision records and migration patterns
• Strong security judgement, troubleshooting ability and stakeholder communication
• Availability to be present in London 50%; onsite more often during the first few months
• Experience leading technical architecture from assessment and design through transition and implementation

Core Competencies

Demonstrates expertise in Microsoft Entra ID and Active Directory Domain Services architecture, focusing on hybrid identity solutions, authentication methods, and enterprise application integration. Capable of producing high-level and low-level design artifacts while leading technical architecture from assessment to implementation.

Highest-signal resume keywords

• Microsoft Entra ID Architecture
• Active Directory Domain Services
• Hybrid Identity Solutions
• Authentication Methods
• Enterprise Application Integration

Hard Skills

• Identity Architecture
• Tenant Configuration
• Identity Synchronisation
• Federation
• Access Governance
• Privileged-Access Controls
• SAML
• OpenID Connect
• OAuth
• SCIM

Soft Skills

• Stakeholder Communication
• Troubleshooting Ability
• Strong Security Judgement

Industry Keywords

• Multi-Tenant Coexistence
• Tenant/Domain Migrations
• Active Directory Consolidation
• High-Level Design
• Low-Level Design

Tools & Technologies

• Entra Connect
• Cloud Sync
• DNS
• Group Policy
• MFA
• Conditional Access