Senior IDAM Architect - Identity Pillar

The Senior IDAM Architect is the ** end to end technical authority for all Identity Pillar scope under Lot 1**, accountable for Initiate, Discovery, Design, and Implementation across Identity Governance & Administration (IGA), Active Directory/Entra ID, RBAC/ABAC, PKI, Conditional Access, Identity Lifecycle, CIEM, and identity threat protection capabilities.

This role acts as the single technical point of contact for all identity related decisions, integrations, designs, and technical escalations, ensuring adherence to Zero Trust principles, Client Delivery & Cyber frameworks, and the architectural governance process., 1. Programme-Level Identity Architecture Leadership

• Serve as the lead architect for all identity capabilities: IGA, directories (AD/OT AD/Entra ID), RBAC/ABAC, Conditional Access, PKI, CIEM, machine identity, identity lifecycle automation.

• Own the architectural strategy and roadmap for the Identity Pillar across Year 1 (I&D) and influence Year 2 planning.

• Act as the single technical authority across all identity workstreams, ensuring coherence, interoperability, and alignment with Zero Trust Identity outcomes.

• Lead technical governance engagement: Information Security TAG, PESA approvals, Design Authority reviews, and cross pillar integration sessions., * Provide hands on architectural oversight to ensure implementations follow approved designs.

• Oversee rollout and validation of:

o IGA connectors, workflows, lifecycle processes

o AD/Entra ID configuration updates and hardening

o Conditional access/MFA/policy rollout

o RBAC role deployment and attestation setup

o PKI enhancements, CA templates, certificate workflows

o CIEM configuration and governance

• Guide identity engineers and application onboarding teams through technical sequencing, integration steps, and issue resolution.

• Validate end to end identity flows (authentication, provisioning, deprovisioning, attestation).

1. Identity Governance, Compliance & Risk

• Ensure all identity designs align with:

o Zero Trust Identity requirements

o CAF/eCAF outcomes

o regulatory and compliance frameworks (GDPR, NIS R, PCI DSS)

• Define governance processes for:

o privileged identity control, * Act as the single point of contact for all identity related technical matters across the programme.

Technical Expertise

• 12+ years in Identity & Access Management architecture.

• Deep expertise in:

o IGA (SailPoint/Saviynt), RBAC/ABAC

o AD/Entra ID/OT AD

o Authentication/Federation (SAML, OAuth2, OIDC)

o Conditional Access & MFA

o PKI & Certificate Lifecycle

o CIEM, cloud identity & Zero Trust identity patterns

• Extensive experience designing and integrating identity capabilities across hybrid (IT/OT) landscapes.

Delivery & Architecture

• Proven experience delivering large-scale IAM transformations end to end.

• Strong architectural documentation and governance skills.

• Ability to lead multi vendor and multi platform identity delivery teams.

Behavioural

• Executive-level communication and architectural leadership.

• Operates confidently across strategic, detailed technical, and operational domains.

• Structured, methodical, collaborative, and outcome driven.