Identity Security Architect

Role:
Identity Security Architect Salary/Rate: c £450 - £550 (flex) per day inside IR35 or FTC c £90k

Location:

Mainly remote - approx 1 day per week London / Southampton Contract Duration: 6-months We are currently looking for an Identity Security Architect for our IT consultancy client. The Identity Security Architect role is mainly remote, based between approx. 1 day per week on site and the remainder working remotely. Office locations on offer are central London or Southampton, as preferred.

The role can be offered as either a day rate contract between c £450-£550 per day inside IR35 on an umbrella solution or as a fixed term contract with a salary of £80-90k. Essential Skills / Experience required:
Significant experience designing enterprise Identity and Access Management solutions. Strong architecture-level expertise with Microsoft Entra  Microsoft identity technologies. Strong understanding of Active Directory and hybrid identity architectures. Demonstrable experience designing Conditional Access strategies at enterprise scale. Strong knowledge of privileged access management and Microsoft Entra PIM .

Experience with identity governance, lifecycle management and access certification. Strong understanding of modern authentication and federation protocols including OAuth 2.0, OpenID Connect, SAML and Kerberos. Experience designing passwordless and phishing-resistant authentication solutions. Strong understanding of Microsoft 365 and Azure security architecture. Experience designing identity controls as part of a Zero Trust security architecture . Ability to assess identity security posture and translate findings into prioritised remediation programmes.

Experience operating in complex enterprise environments with multiple business units, applications and stakeholder groups. Role / Responsibilities:
Define and deliver enterprise Identity & Access Management (IAM) architecture, primarily leveraging Microsoft Entra s cloud, hybrid and on-premises environments. Design secure authentication, authorisation and identity governance solutions for users, administrators, applications, workloads and external identities. Develop identity roadmaps, architecture standards, security patterns and technical governance frameworks. Architect and optimise Microsoft Entra capabilities including Conditional Access, , PIM, Identity Governance, External , Access Reviews, Entitlement Management and Hybrid Identity solutions.

Design hybrid identity integrations between Active Directory and Microsoft Entra , including strategies for passwordless and phishing-resistant authentication (FIDO2, Windows Hello for Business, Microsoft Authenticator and certificate-based authentication). Implement Zero Trust identity architectures, enforcing least privilege, risk-based access controls and secure administrative access models. Define privileged access strategies using Entra PIM, RBAC/ABAC, Just-in-Time (JIT) access and privileged account governance. Lead identity governance initiatives, including Joiner-Mover-Leaver (JML) processes, access certification, lifecycle automation and management of guest/external identities.

Provide architectural guidance for application and workload identities, including OAuth 2.0, OpenID Connect, SAML, Enterprise Applications, App Registrations, Managed Identities and Service Principals. Establish governance for application permissions, secrets, certificates and workload credentials, reducing reliance on long-lived credentials. Ensure identity services integrate effectively with the wider Microsoft security ecosystem, including Defender, Sentinel, Intune, Purview and Azure security services. Conduct identity assessments, identify security and operational improvements, and mitigate risks related to privileged access, credential exposure and legacy authentication.

Lead stakeholder workshops, translate business and security requirements into technical solutions, and produce architecture documentation, standards and migration roadmaps. Provide technical leadership, design assurance and governance support throughout project delivery, implementation and solution lifecycle. If you are interested in the above role, please click Apply Now and send a CV for quick review. Should you require reasonable adjustments at any point during the recruitment process, if there is a better way for us to communicate, please do let us know.

Architect, Security Architect, Architecture, Governance, Security, IAM, IDAM, Identity And Access Management, Identity & Access Management, User Access Management, Identity Access Management, Privileged Access Management, Entra e Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them.

Follow us on Facebook
- Circle Recruitment , Twitter - @ and Linked In
- Circle Recruitment.