IAM Architect - Entra

Hudson; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

Hudson seeks an experienced Identity Solution Architect to lead the design and delivery of a major IAM modernization program. The role focuses on transforming legacy identity platforms into a secure, cloud-first environment centred on Microsoft Entra ID.

You will collaborate with architecture, cyber security and engineering teams to define target-state IAM solutions, provide technical leadership and ensure alignment between business, security and operational requirements.

Qualifications

• Extensive experience designing enterprise IAM solutions in complex hybrid environments.
• Strong expertise in Microsoft Entra ID, Active Directory, AD FS, Microsoft Identity Manager (MIM), SSO, identity governance and privileged access management.
• Proven experience developing HLDs, DSDs and architecture documentation.
• Experience with identity lifecycle management and Joiner-Mover-Leaver processes.
• Knowledge of security assurance and accreditation activities, including SSPs, SRMPs, IRAP and AtO processes.
• Strong stakeholder engagement and communication skills.
• Microsoft Identity, Azure Architecture and/or Cyber Security certifications are highly regarded.
• Only those with Australian citizenship who have, or are willing to obtain an AGSVA clearance will be considered.

Responsibilities

• Lead discovery, architecture and design workshops with technical and business stakeholders.
• Assess existing IAM environments, integrations and dependencies.
• Develop current, transition and target-state identity architectures.
• Produce architecture artefacts including HLDs, DSDs, integration designs and migration plans.
• Define authentication, provisioning, identity governance, privileged access and Single Sign-On (SSO) patterns.
• Identify technical risks, constraints and dependencies, providing solution recommendations.
• Provide architecture assurance throughout design, build, testing and deployment phases.
• Support security documentation, accreditation activities, testing and operational handover.
• Mentor engineers and provide technical direction across the delivery lifecycle.

Skills

IAM architectures

Microsoft Entra ID

SSO patterns

Identity governance

Stakeholder engagement

Tools

HLDs

DSDs

Job description

We are seeking an experienced Identity Solution Architect to lead the design and delivery of a major Identity and Access Management (IAM) modernisation program. The role will focus on transforming legacy identity platforms into a secure, cloud-first environment centred on Microsoft Entra ID. Working with architecture, cyber security and engineering teams, you will define target-state IAM solutions, provide technical leadership, and ensure alignment between business, security and operational requirements.

We are seeking an experienced Identity Solution Architect to lead the design and delivery of a major Identity and Access Management (IAM) modernisation program. The role will focus on transforming legacy identity platforms into a secure, cloud-first environment centred on Microsoft Entra ID. Working with architecture, cyber security and engineering teams, you will define target-state IAM solutions, provide technical leadership, and ensure alignment between business, security and operational requirements.

Responsibilities

• Lead discovery, architecture and design workshops with technical and business stakeholders.
• Assess existing IAM environments, integrations and dependencies.
• Develop current, transition and target-state identity architectures.
• Produce architecture artefacts including HLDs, DSDs, integration designs and migration plans.
• Define authentication, provisioning, identity governance, privileged access and Single Sign-On (SSO) patterns.
• Identify technical risks, constraints and dependencies, providing solution recommendations.
• Provide architecture assurance throughout design, build, testing and deployment phases.
• Support security documentation, accreditation activities, testing and operational handover.
• Mentor engineers and provide technical direction across the delivery lifecycle.

Requirements

• Extensive experience designing enterprise IAM solutions in complex hybrid environments.
• Strong expertise in Microsoft Entra ID, Active Directory, AD FS, Microsoft Identity Manager (MIM), SSO, identity governance and privileged access management.
• Proven experience developing HLDs, DSDs and architecture documentation.
• Experience with identity lifecycle management and Joiner-Mover-Leaver processes.
• Knowledge of security assurance and accreditation activities, including SSPs, SRMPs, IRAP and AtO processes.
• Strong stakeholder engagement and communication skills.
• Microsoft Identity, Azure Architecture and/or Cyber Security certifications are highly regarded.
• Only those with Australian citizenship who have, or are willing to obtain an AGSVA clearance will be considered

If you would like to learn more about this role please apply online or reach out to ***email_hidden***

Diversity, Equity & Inclusion at Hudson Hudson is committed to helping you find a workplace where you feel respected, supported, and free to thrive. We welcome applications from all backgrounds, identities, and lived experiences—because when different voices come together, amazing things happen.

Casual Loading

Please note for all Australian based contract and temporary roles only, the pay rate is inclusive ofmandatory 25% casual loading. This excludes permanent and fixed term roles.

Due to current Victorian labour hire licence restrictions, Hudson is not advertising, offering or accepting applications for contract, temporary or labour hire roles that are based in Victoria or otherwise connected to Victoria. This includes contract, temporary or labour hire roles where the candidate resides in Victoria, even if the role is based in another state. These restrictions do not apply to permanent or fixed term employment opportunities.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .