Microsoft IAM Architect

Salary: £90,000 - 90,000 per year

Requirements:

• Extensive enterprise-level experience across Microsoft Entra ID and Active Directory, including architecture, implementation, governance, and roadmap ownership
• Proven architectural background in designing identity infrastructure solutions
• Experience delivering identity modernisation at scale
• Track record of leading complex identity infrastructure projects from inception to completion
• Experience operating within large, global enterprise environments
• Enterprise-level Joiner, Mover, Leaver (JML) automation integrations
• Strong understanding of IAM security principles, including governance, least privilege, Zero Trust, modern authentication, and alignment to recognised security frameworks
• Experience delivering Privileged Access Management (PAM) solutions at scale
• Strong stakeholder communication skills
• Ability to mentor and elevate junior engineers
• Right to work in the UK; no sponsorship available
• Exposure to FIDO2 or modern passwordless authentication methods is desirable
• Experience with ManageEngine or Delinea is desirable
• Identity-related certifications are desirable

Responsibilities:

• Lead modernisation and optimisation of our enterprise Active Directory infrastructure
• Drive improvements across hybrid identity, including on-premises and cloud synchronisation and source of authority evolution
• Design and deliver complex identity infrastructure projects such as certificate authority rollout, domain consolidation, and authentication modernisation
• Evaluate and implement modern authentication methods such as FIDO2
• Support identity integration across manufacturing and operational technology (OT) environments
• Lead identity infrastructure initiatives end-to-end, owning delivery from initial concept and design through to implementation and operational handover
• Collaborate on identity infrastructure pipelines and automation
• Contribute to strategic and roadmap decisions for our enterprise IAM estate
• Mentor junior engineers and shape identity engineering standards
• Manage stakeholders across IT, OT, Senior Leadership, Information Security, Cyber, Cloud Infrastructure, and third-party vendors

Technologies:

• Active Directory
• Architect
• Cloud
• IAM
• Support
• Security

More:

We are a global enterprise organisation offering a senior IAM Architect opportunity to take ownership of our on-premises Active Directory estate within a complex hybrid identity environment. Based in Basingstoke, Hampshire, the role requires onsite presence twice per month and offers a salary of up to £90k plus a 15% annual bonus. You will work closely with cloud and infrastructure teams to evolve our broader IAM strategy, with the independence to introduce new technologies, process improvements, and automation across the identity domain. This is a chance to help build a robust, modern, and secure IAM platform that can automate, protect, and scale across our enterprise, including both traditional IT and manufacturing/OT environments.

last updated 30 week of 2026