Identity Architect

The Opportunity

We are seeking an Identity Architect for a contract engagement within a large-scale Microsoft enterprise environment.

This role focuses on practical architecture, shaping how information systems integrate during an active cloud migration. You will bring end-to-end IAM expertise to govern access, design robust identity controls, and ensure coherence across both workforce and customer platforms.

Key Responsibilities

• Design and maintain the IAM architecture spanning both workforce (WIAM) and customer (CIAM) identity across hybrid and cloud states.
• Establish and enforce privileged access controls, identifying and remediating toxic access combinations and Separation of Duties (SoD) conflicts.
• Define integration patterns and manage the hybrid identity posture as enterprise workloads transition to the cloud.
• Design SSO and federation architecture utilizing SAML 2.0, OAuth 2.0, and OIDC across enterprise and customer-facing applications.
• Own the identity lifecycle management (JML) design and establish practical access certification reviews that are proportionate to risk.

Skills And Experience Required

• Extensive commercial experience in IAM architecture, with clear accountability for delivering solutions across both WIAM and CIAM contexts.
• Deep working knowledge of the Microsoft identity stack, specifically Entra ID, Active Directory, Azure RBAC, and Microsoft 365.
• Practical experience designing privileged access controls and remediating toxic access combinations at an enterprise scale.
• Hands-on knowledge of core identity protocols, including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
• Familiarity with IGA platforms (such as SailPoint) and CIAM platforms (such as Optimal) is highly advantageous.

How To Apply

To submit your interest, please select the "Apply now" option. For a confidential discussion about delivery expectations, contact Amaan Kazmi at ***email_hidden*** or 022 060 7986.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Experience

8 years

Skills

Identity Architect, IAM, WIAM, CIAM, Entra ID, Cloud Migration, Privileged Access, SailPoint, CyberSecurity.

Qualifications

• Bachelor Degree

education

Bachelor Degree&ICT