Identity Architect

About the Role

We are currently on the lookout for an Identity Architect to join a sizable Microsoft enterprise environment on a contract basis. This position centers on practical architectural design during a dynamic cloud migration phase, where you will apply comprehensive IAM expertise to structure access governance, establish strong identity controls, and maintain consistency across both workforce and customer identity platforms.

Key Responsibilities

• Develop and oversee the IAM architecture that integrates workforce identity (WIAM) and customer identity (CIAM) spanning hybrid and cloud environments.
• Implement and monitor privileged access controls by identifying and resolving problematic access combinations and enforcing Separation of Duties (SoD).
• Create and manage integration models supporting hybrid identity strategies as enterprise services move to cloud infrastructure.
• Architect single sign-on (SSO) and federation solutions using protocols such as SAML 2.0, OAuth 2.0, and OIDC for internal and customer-facing applications.
• Lead the design of identity lifecycle management (Joiner, Mover, Leaver processes) and institute risk-aligned access review certifications.

Skills and Experience

• Proven extensive commercial experience in IAM architecture with hands-on delivery across WIAM and CIAM.
• In-depth expertise with Microsoft identity technologies including Entra ID, Active Directory, Azure Role-Based Access Control (RBAC), and Microsoft 365 suites.
• Experienced in designing privileged access controls and mitigating toxic access at an enterprise scale.
• Proficient with core identity and access management protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), System for Cross-domain Identity Management (SCIM), and Lightweight Directory Access Protocol (LDAP).
• Knowledge or practical experience with Identity Governance and Administration (IGA) tools like SailPoint, and Customer IAM (CIAM) platforms such as Optimal is highly preferable.

Additional Information

This role is based onsite in Auckland, New Zealand, and is offered on a contract basis. The ideal candidate will have at least eight years of relevant experience and hold a Bachelor's degree. The employer values diversity and equal employment opportunities and encourages applicants from all backgrounds.

For enquiries or further information, contact Amaan Kazmi at Randstad Digital New Zealand via email or phone. Applications should be submitted promptly through the designated channels.