The Opportunity
We are seeking an Identity Architect for a contract engagement within a large-scale Microsoft enterprise environment.
This role focuses on practical architecture, shaping how information systems integrate during an active cloud migration. You will bring end-to-end IAM expertise to govern access, design robust identity controls, and ensure coherence across both workforce and customer platforms.
Key Responsibilities
- Design and maintain the IAM architecture spanning both workforce (WIAM) and customer (CIAM) identity across hybrid and cloud states.
- Establish and enforce privileged access controls, identifying and remediating toxic access combinations and Separation of Duties (SoD) conflicts.
- Define integration patterns and manage the hybrid identity posture as enterprise workloads transition to the cloud.
- Design SSO and federation architecture utilizing SAML 2.0, OAuth 2.0, and OIDC across enterprise and customer-facing applications.
- Own the identity lifecycle management (JML) design and establish practical access certification reviews that are proportionate to risk.
Skills and Experience Required
- Extensive commercial experience in IAM architecture, with clear accountability for delivering solutions across both WIAM and CIAM contexts.
- Deep working knowledge of the Microsoft identity stack, specifically Entra ID, Active Directory, Azure RBAC, and Microsoft 365.
- Practical experience designing privileged access controls and remediating toxic access combinations at an enterprise scale.
- Hands-on knowledge of core identity protocols, including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
- Familiarity with IGA platforms (such as SailPoint) and CIAM platforms (such as Optimal) is highly advantageous.
How to Apply
To submit your interest, please select the "Apply now" option. For a confidential discussion about delivery expectations, contact Amaan Kazmi at amaan.kazmi@randstaddigital.co.nz or 022 060 7986.
At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.
...
