> Markdown version of [/jobs/ext/2401310-identity-security-architect](https://www.wearedevelopers.com/jobs/ext/2401310-identity-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Security Architect - **Company:** Circle Group Ltd - **Location:** London, UK (Remote available) - **Salary:** £117,000.0 - £143,000.0 - **Contract:** Temporary contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, User Authentication, Microsoft Azure, Cyber Security, Identity and Access Management, Kerberos (Protocol), Microsoft Security Essentials, OAuth, Role-Based Access Control, Openid Connect, Azure Active Directory, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Enterprise Software Applications, Microsoft InTune - **Published:** August 18, 2026 - **Apply:** https://www.totaljobs.com/job/security-architect/circle-group-job107863083 ## About the Role * Significant experience designing enterprise Identity and Access Management solutions. * Strong architecture-level expertise with Microsoft Entra ID and Microsoft identity technologies. * Strong understanding of Active Directory and hybrid identity architectures. * Demonstrable experience designing Conditional Access strategies at enterprise scale. * Strong knowledge of privileged access management and Microsoft Entra PIM. * Experience with identity governance, lifecycle management and access certification. * Strong understanding of modern authentication and federation protocols including OAuth 2.0, OpenID Connect, SAML and Kerberos. * Experience designing passwordless and phishing-resistant authentication solutions. * Strong understanding of Microsoft 365 and Azure security architecture. * Experience designing identity controls as part of a Zero Trust security architecture. * Ability to assess identity security posture and translate findings into prioritised remediation programmes. * Experience operating in complex enterprise environments with multiple business units, applications and stakeholder groups. ## Description * Define and deliver enterprise Identity & Access Management (IAM) architecture, primarily leveraging Microsoft Entra ID across cloud, hybrid and on-premises environments. * Design secure authentication, authorisation and identity governance solutions for users, administrators, applications, workloads and external identities. * Develop identity roadmaps, architecture standards, security patterns and technical governance frameworks. * Architect and optimise Microsoft Entra capabilities including Conditional Access, ID Protection, PIM, Identity Governance, External ID, Access Reviews, Entitlement Management and Hybrid Identity solutions. * Design hybrid identity integrations between Active Directory and Microsoft Entra ID, including strategies for passwordless and phishing-resistant authentication (FIDO2, Windows Hello for Business, Microsoft Authenticator and certificate-based authentication). * Implement Zero Trust identity architectures, enforcing least privilege, risk-based access controls and secure administrative access models. * Define privileged access strategies using Entra PIM, RBAC/ABAC, Just-in-Time (JIT) access and privileged account governance. * Lead identity governance initiatives, including Joiner-Mover-Leaver (JML) processes, access certification, lifecycle automation and management of guest/external identities. * Provide architectural guidance for application and workload identities, including OAuth 2.0, OpenID Connect, SAML, Enterprise Applications, App Registrations, Managed Identities and Service Principals. * Establish governance for application permissions, secrets, certificates and workload credentials, reducing reliance on long-lived credentials. * Ensure identity services integrate effectively with the wider Microsoft security ecosystem, including Defender, Sentinel, Intune, Purview and Azure security services. * Conduct identity assessments, identify security and operational improvements, and mitigate risks related to privileged access, credential exposure and legacy authentication. * Lead stakeholder workshops, translate business and security requirements into technical solutions, and produce architecture documentation, standards and migration roadmaps. * Provide technical leadership, design assurance and governance support throughout project delivery, implementation and solution lifecycle. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)