Identity Architect - Hybrid London

Methods Business and Digital Technology Limited is a 100M+ IT Services Consultancy that has partnered with various central government departments and agencies to transform the public sector in the UK. Established over 30 years ago, we apply our skills in transformation, delivery, and collaboration to create end-to-end business and technical solutions that are people-centred, safe, and designed for the future.

We support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods, we have fun while working hard; we are not afraid of making mistakes and learning from them.

We are undertaking a significant transformation programme that will reshape the way technology, identity, and services are delivered across one of our client's organisations. We are looking for an experienced Identity & Directory Architect to design the identity and directory foundation that will underpin this transformation.

This is a key architecture role with responsibility for establishing a secure, resilient, and pragmatic identity model that allows the organisation to operate across its existing technology environments while progressively introducing new target services.

You will lead the development of an Entra ID-led identity strategy, working across Microsoft Entra ID, Active Directory, authentication, identity lifecycle, directory services, and DNS. You will need to balance the requirements of the existing estate with the ambition of the target architecture, ensuring that the organisation can transition safely without introducing unnecessary operational or security risk.

A major part of the role will be designing the coexistence and transition architecture. You will establish the patterns, controls, and sequencing required to support a controlled transition.

You will also define the longer-term strategy for the Active Directory estate, creating a safe and evidence-based route towards eventual consolidation and simplification.

This is an opportunity to take ownership of a critical technology domain within a complex transformation and have a direct influence on the organisation's future identity architecture.

Requirements

As the Identity & Directory Architect, you will own the technical architecture across the identity and directory domain and provide leadership from initial assessment and design through transition and implementation.

• Define the current-state, coexistence, transition, and target-state identity architectures, providing a clear roadmap from the existing environment to the future operating model.
• Lead the Entra ID architecture, including tenant configuration, identity synchronisation, authentication, federation, domains, administrative boundaries, and integration with existing directory services.
• Define secure hybrid identity patterns that allow existing applications, infrastructure, and services to continue operating while new cloud and target services are introduced.
• Design the organisation's identity lifecycle management approach, covering joiner, mover, and leaver processes, provisioning, deprovisioning, synchronisation, and access governance.
• Establish appropriate patterns for authentication and access, including modern authentication, MFA, Conditional Access, federation, and application authentication.
• Define the approach for external identities, service accounts, non-human identities, and other specialist identity requirements.
• Design privileged-access controls, including break-glass accounts, delegated administration, administrative boundaries, and separation of duties.
• Define the future strategy for Active Directory Domain Services, including domains, forests, organisational units, trusts, Group Policy dependencies, legacy authentication, and administrative models.
• Assess the existing Active Directory estate, identifying technical debt, application dependencies, operational constraints, and opportunities for simplification.
• Develop a pragmatic and risk-managed roadmap towards future Active Directory consolidation, ensuring consolidation only occurs when the necessary prerequisites and target services are in place.
• Own the DNS and namespace architecture, including name resolution, DNS forwarding, service discovery, namespace integration, and dependencies between existing and target environments.
• Ensure DNS and directory designs support secure and reliable operation across hybrid environments and do not create unnecessary future dependencies.
• Define enterprise application integration patterns using technologies and standards.

Skills and experience required

• Deep architecture experience with Microsoft Entra ID, Active Directory Domain Services, and hybrid identity.
• Strong knowledge of Entra Connect or Cloud Sync, authentication methods, federation, MFA, and Conditional Access.
• Experience of multi-tenant coexistence, tenant/domain migrations, and Active Directory consolidation.
• Strong DNS, namespace, trusts, GPO, privileged-access, and directory-security knowledge.
• Understanding of SAML, OpenID Connect, OAuth, SCIM, and enterprise application integration.
• Ability to produce HLD/LLD artefacts, transition designs, decision records, and migration patterns.
• Strong security judgement, troubleshooting ability, and stakeholder communication.

Location: The role will involve being present in London 50% of the time; the first few months will be onsite more often, and then a hybrid model will be worked out.

Benefits

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy. By joining us, you can expect:

• Autonomy to develop and grow your skills and experience.
• Be part of exciting project work that is making a difference in society.
• Strong, inspiring, and thought-provoking leadership.
• A supportive and collaborative environment.

As well as this, we offer:

• Development – access to LinkedIn Learning, a management development programme, and training.
• Wellness – 24/7 confidential employee assistance programme.
• Flexible Working – including home working and part-time.
• Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes.
• Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 5 extra days each year.
• Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation.
• Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution.
• Life Assurance – of 4 times base salary.
• Private Medical Insurance – which is non-contributory (spouse and dependants included).
• Worldwide Travel Insurance – which is non-contributory (spouse and dependants included).
• Enhanced Maternity and Paternity Pay.
• Travel – season ticket loan, cycle to work scheme.

For a full list of benefits, please visit our website.