Identity Architect – Hybrid London

Overview

In this role you will design and govern the identity and directory foundation for a major transformation programme. You will lead an Entra ID–driven strategy, balancing existing estate with a target architecture and a controlled transition plan. You will define lifecycle, authentication, and access patterns, plus governance across hybrid environments. Your work will directly influence the organisation’s secure identity landscape and future consolidation path. This is an opportunity to shape critical technology amid a complex transformation in collaboration with cross‑functional teams.

Pay / Benefits

• Autonomy to develop and grow your skills and experience
• Exciting project work making a difference in society
• Strong, inspiring leadership
• Supportive and collaborative environment
• LinkedIn Learning and training
• Flexible working including home working

Responsibilities

• Define current-state, coexistence, transition, and target-state identity architectures with a clear roadmap
• Lead Entra ID architecture, including tenant config, identity synchronization, authentication, federation, domains, and integration with directory services
• Define secure hybrid identity patterns enabling legacy and new cloud services to coexist
• Design identity lifecycle management across joiner/mover/leaver, provisioning, deprovisioning, synchronization and access governance
• Establish authentication and access patterns including MFA, Conditional Access, federation and application authentication
• Define external identities, service accounts and non-human identities requirements
• Design privileged-access controls including break-glass accounts and separation of duties
• Define future strategy for Active Directory Domain Services, including domains, forests, trusts and GPO dependencies
• Assess existing Active Directory estate for debt and dependencies and plan consolidation when prerequisites exist
• Own DNS and namespace architecture to support secure, reliable hybrid operation
• Define enterprise application integration patterns and relevant standards

Key requirements

• Deep architecture experience with Microsoft Entra ID, Active Directory Domain Services and hybrid identity
• Strong knowledge of Entra Connect or Cloud Sync, authentication methods, federation, MFA and Conditional Access
• Experience with multi-tenant coexistence, tenant/domain migrations and AD consolidation
• Strong DNS, namespace, trusts, GPO, privileged-access and directory-security knowledge
• Understanding of SAML, OpenID Connect, OAuth, SCIM and enterprise application integration
• Ability to produce HLD/LLD artefacts, transition designs, decision records and migration patterns
• Strong security judgement, troubleshooting ability and stakeholder communication

• strong stakeholder communication
• leadership
• problem-solving
• Microsoft Entra ID
• Active Directory Domain Services
• Entra Connect / Cloud Sync

…