Lead IAM / Microsoft Entra ID Solution Architect - Contract - Melbourne

Requirements

Role Summary

The Lead IAM / Microsoft Entra ID Architect will provide architectural leadership for enterprise Identity and Access Management transformation initiatives. The role is responsible for assessing current-state identity environments, defining future-state architecture, designing Microsoft Entra ID solutions, and guiding the migration of users, applications and access controls to a modern cloud-based identity platform.

Key Responsibilities

· Lead enterprise identity architecture strategy, design and implementation activities.

· Assess existing IAM environments and define modernization roadmaps.

· Design Microsoft Entra ID as the strategic identity platform.

· Define authentication, federation, Single Sign-On and identity integration architectures.

· Design Conditional Access, MFA, Identity Governance and Privileged Access controls.

· Architect identity lifecycle management processes including Joiner, Mover and Leaver workflows.

· Design migration strategies for users, groups, applications and identity services.

· Define coexistence approaches for legacy and target-state identity platforms.

· Lead architecture workshops and technical design sessions.

· Produce high-quality architecture, security and migration documentation.

· Provide technical governance and implementation oversight.

· Support testing, cutover planning, operational readiness and knowledge transfer activities.

Required Experience

· 10+ years of Identity and Access Management experience.

· Extensive experience designing and implementing Microsoft Entra ID solutions.

· Proven experience leading IAM transformation and migration programs.

· Strong knowledge of hybrid identity architectures and enterprise authentication frameworks.

· Experience integrating cloud and enterprise applications with identity platforms.

· Demonstrated customer-facing consulting and architecture leadership experience.

Technical Expertise

· Microsoft Entra ID

· Azure Active Directory

· Conditional Access

· Privileged Identity Management (PIM)

· Identity Governance

· Single Sign-On (SSO)

· Multi-Factor Authentication (MFA)

· SAML

· OAuth 2.0

· OpenID Connect (OIDC)

· SCIM

· Active Directory & Hybrid Identity

· Microsoft 365 Identity Services

Preferred Certifications

· Microsoft Certified: Cybersecurity Architect Expert

· Microsoft Certified: Identity and Access Administrator Associate

· Microsoft Certified: Azure Solutions Architect Expert

· TOGAF

· CISSP