identity architect

Identity Architect

The Opportunity

We are seeking an Identity Architect for a contract engagement within a large-scale Microsoft enterprise environment.

This role focuses on practical architecture, shaping how information systems integrate during an active cloud migration. You will bring end-to-end IAM expertise to govern access, design robust identity controls, and ensure coherence across both workforce and customer platforms.

Key Responsibilities

• Design and maintain the IAM architecture spanning both workforce (WIAM) and customer (CIAM) identity across hybrid and cloud states.
• Establish and enforce privileged access controls, identifying and remediating toxic access combinations and Separation of Duties (SoD) conflicts.
• Define integration patterns and manage the hybrid identity posture as enterprise workloads transition to the cloud.
• Design SSO and federation architecture utilizing SAML 2.0, OAuth 2.0, and OIDC across enterprise and customer-facing applications.
• Own the identity lifecycle management (JML) design and establish practical access certification reviews that are proportionate to risk.

Skills And Experience Required

• Extensive commercial experience in IAM architecture, with clear accountability for delivering solutions across both WIAM and CIAM contexts.
• Deep working knowledge of the Microsoft identity stack, specifically Entra ID, Active Directory, Azure RBAC, and Microsoft 365.
• Practical experience designing privileged access controls and remediating toxic access combinations at an enterprise scale.
• Hands-on knowledge of core identity protocols, including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
• Familiarity with IGA platforms (such as SailPoint) and CIAM platforms (such as Optimal) is highly advantageous.

How to Apply

To submit your interest, please select the "Apply now" option. For a confidential discussion about delivery expectations, contact Amaan Kazmi at ***email_hidden*** or 022 060 7986.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Identity Architect

The Opportunity

We are seeking an Identity Architect for a contract engagement within a large-scale Microsoft enterprise environment.

This role focuses on practical architecture, shaping how information systems integrate during an active cloud migration. You will bring end-to-end IAM expertise to govern access, design robust identity controls, and ensure coherence across both workforce and customer platforms.

Key Responsibilities

• Design and maintain the IAM architecture spanning both workforce (WIAM) and customer (CIAM) identity across hybrid and cloud states.
• Establish and enforce privileged access controls, identifying and remediating toxic access combinations and Separation of Duties (SoD) conflicts.
• Define integration patterns and manage the hybrid identity posture as enterprise workloads transition to the cloud.
• Design SSO and federation architecture utilizing SAML 2.0, OAuth 2.0, and OIDC across enterprise and customer-facing applications.
• Own the identity lifecycle management (JML) design and establish practical access certification reviews that are proportionate to risk.

Skills And Experience Required

• Extensive commercial experience in IAM architecture, with clear accountability for delivering solutions across both WIAM and CIAM contexts.
• Deep working knowledge of the Microsoft identity stack, specifically Entra ID, Active Directory, Azure RBAC, and Microsoft 365.
• Practical experience designing privileged access controls and remediating toxic access combinations at an enterprise scale.
• Hands-on knowledge of core identity protocols, including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
• Familiarity with IGA platforms (such as SailPoint) and CIAM platforms (such as Optimal) is highly advantageous.

How to Apply

To submit your interest, please select the "Apply now" option. For a confidential discussion about delivery expectations, contact Amaan Kazmi at ***email_hidden*** or 022 060 7986.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

8 years

Identity Architect, IAM, WIAM, CIAM, Entra ID, Cloud Migration, Privileged Access, SailPoint, CyberSecurity.

• Bachelor Degree

Bachelor Degree