IAM Architect (Entra ID / Azure / SSO)

- Monitor and evaluate emerging IAM trends (e.g., passwordless authentication, decentralised identity, adaptive access controls). - Lead automation and governance initiatives, including machine-learning-based anomaly detection. - Integrate and optimise multi-factor authentication, biometrics, and mobile identity capabilities. - Drive adoption of identity threat detection and response (ITDR) solutions. - Develop and maintain IAM architecture covering identity lifecycle, governance, and privileged access. - Design secure authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP). - Embed Zero Trust and least-privilege principles across systems and applications. - Own global firewall architecture and contribute to micro-segmentation and network security strategy. - Enhance privileged access management (PAM), including workflow and monitoring capabilities. - Ensure audit readiness and contribute to compliance frameworks (e.g., ISO standards). - Integrate IAM with HR, IT, and engineering systems for lifecycle automation. - Oversee Conditional Access, risk-based authentication, and device-state policies. - Support the secure operation of multi-site Active Directory domains and cloud identity platforms. - Collaborate with cross-regional IT and business leaders; manage vendor relationships and roadmaps. - Assess IAM vulnerabilities and define mitigation strategies.