Identity Architect - Hybrid London

Methods Business and Digital Technology; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Development opportunities

Wellness programme

Flexible Working

Social events and volunteering

Job summary

Methods Business and Digital Technology Limited is seeking an Identity & Directory Architect to design and govern the identity and directory foundation for a major transformation. You will lead Entra ID architecture, hybrid identity patterns and controlled transition while aligning with existing environments and target services.

The role focuses on secure identity lifecycle, authentication, access governance and integration across AD, Entra ID, and DNS in a UK government–facing context.

Qualifications

• Deep experience with Microsoft Entra ID and AD DS in hybrid environments.
• Knowledge of Entra Connect/Cloud Sync, authentication methods and federation.
• Experience with multi-tenant coexistence and AD consolidation.

Responsibilities

• Own the identity and directory architecture across the domain and guide design through transition.
• Lead Entra ID architecture, tenant setup, authentication, federation and integration with directory services.
• Define secure hybrid identity patterns for existing and new cloud services.
• Design identity lifecycle management including joiner, mover, leaver and provisioning processes.
• Establish authentication and access patterns including MFA, Conditional Access and federation.
• Plan external identities, service accounts and non-human identities; enforce privileged-access controls.

Skills

Entra ID

Active Directory

Hybrid identity

MFA

Conditional Access

Federation

Security architecture

Identity lifecycle

Tools

Entra Connect

Cloud Sync

SAML

OIDC

OAuth

DNS

Job description

Methods Business and Digital Technology Limited

Methods is a £100M+ IT Services Consultancy who has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Established over 30 years ago and UK-based, we apply our skills in transformation, delivery, and collaboration from across the Methods Group, to create end-to-end business and technical solutions that are people-centred, safe, and designed for the future.

Our human touch sets us apart from other consultancies, system integrators and software houses - with people, technology, and data at the heart of who we are, we believe in creating value and sustainability through everything we do for our clients, staff, communities, and the planet.

We support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.

Predominantly focused on the public-sector, Methods is now building a significant private sector client portfolio.

Methods was acquired by the Alten Group in early 2022.

About the role

We are undertaking a significant transformation programme that will reshape the way technology, identity and services are delivered across one of our clients organisation. As part of this programme, we are looking for an experiencedIdentity & Directory Architectto design the identity and directory foundation that will underpin the transformation.

This is a key architecture role with responsibility for establishing a secure, resilient and pragmatic identity model that allows the organisation to operate across its existing technology environments while progressively introducing new target services.

You will lead the development of anEntra ID-led identity strategy, working across Microsoft Entra ID, Active Directory, authentication, identity lifecycle, directory services and DNS. You will need to balance the requirements of the existing estate with the ambition of the target architecture, ensuring that the organisation can transition safely without introducing unnecessary operational or security risk.

A major part of the role will be designing thecoexistence and transition architecture. The organisation cannot simply move from the current environment to the target state overnight, so you will establish the patterns, controls and sequencing required to support a controlled transition.

You will also define the longer-term strategy for the Active Directory estate, creating a safe and evidence-based route towards eventual consolidation and simplification.

This is an opportunity to take ownership of a critical technology domain within a complex transformation and have a direct influence on the organisation's future identity architecture.

What you will do

As the Identity & Directory Architect, you will own the technical architecture across the identity and directory domain and provide leadership from initial assessment and design through transition and implementation.

You will:

• Define thecurrent-state, coexistence, transition and target-state identity architectures, providing a clear roadmap from the existing environment to the future operating model.
• Lead theEntra ID architecture, including tenant configuration, identity synchronisation, authentication, federation, domains, administrative boundaries and integration with existing directory services.
• Define secure hybrid identity patterns that allow existing applications, infrastructure and services to continue operating while new cloud and target services are introduced.
• Design the organisation'sidentity lifecycle managementapproach, covering joiner, mover and leaver processes, provisioning, deprovisioning, synchronisation and access governance.
• Establish appropriate patterns forauthentication and access, including modern authentication, MFA, Conditional Access, federation and application authentication.
• Define the approach forexternal identities, service accounts, non-human identities and other specialist identity requirements.
• Design privileged-access controls, includingbreak-glass accounts, delegated administration, administrative boundaries and separation of duties.
• Define the future strategy forActive Directory Domain Services, including domains, forests, organisational units, trusts, Group Policy dependencies, legacy authentication and administrative models.
• Assess the existing Active Directory estate, identifying technical debt, application dependencies, operational constraints and opportunities for simplification.
• Develop a pragmatic and risk-managed roadmap towardsfuture Active Directory consolidation, ensuring consolidation only occurs when the necessary prerequisites and target services are in place.
• Own theDNS and namespace architecture, including name resolution, DNS forwarding, service discovery, namespace integration and dependencies between existing and target environments.
• Ensure DNS and directory designs support secure and reliable operation across hybrid environments and do not create unnecessary future dependencies.
• Define enterprise application integration patterns using technologies and standards

Skills and experience required

• Deep architecture experience with Microsoft Entra ID, Active Directory Domain Services and hybrid identity.

• Strong knowledge of Entra Connect or Cloud Sync, authentication methods, federation, MFA and Conditional Access.

• Experience of multi-tenant coexistence, tenant/domain migrations and Active Directory consolidation.

• Strong DNS, namespace, trusts, GPO, privileged-access and directory-security knowledge.

• Understanding of SAML, OpenID Connect, OAuth, SCIM and enterprise application integration.

• Ability to produce HLD/LLD artefacts, transition designs, decision records and migration patterns.

• Strong security judgement, troubleshooting ability and stakeholder communication.

Location : the role will involve being present in London 50% - the first few months will be onsite more often and then a hybrid model will be worked out.

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

By joining us you can expect:

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring, and thought-provoking leadership
• A supportive and collaborative environment

As well as this we offer:

• Development – access to LinkedIn Learning, a management development programme, and training
• Wellness – 24/7 confidential employee assistance programme
• Flexible Working – including home working and part time
• Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
• Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 5 extra days each year
• Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation
• Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
• Life Assurance – of 4 times base salary
• Private Medical Insurance – which is non-contributory (spouse and dependants included)
• Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)
• Enhanced Maternity and Paternity Pay
• Travel – season ticket loan, cycle to work scheme

For a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)