Lead Consultant

Chess; United Kingdom; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Private healthcare

Eye tests & health checks

Flexible working/hub access

Home office allowance

Holiday trade/Extra holidays

Perkbox discounts

Charity donation matching

Job summary

Chess ICT is seeking a Senior Identity Architect to lead enterprise Entra ID design across multi-forest and cross-tenant environments. You will shape strategy, governance, and delivery in hybrid identity projects, working with security, infrastructure and application teams.

You will mentor consultants, produce design artefacts, and drive identity governance and migration efforts, including MIM and Entra Connect to Cloud Sync. This role offers a hybrid, home-first working model in the UK.

Qualifications

• 15+ years in enterprise-scale identity architecture.
• Experience across multi-forest, multi-tenant, or regulated environments.
• Experience leading identity workstreams within large cloud transformations.

Responsibilities

• Lead design and delivery of Entra ID architecture across hybrid identity environments.
• Lead large-scale M&A consolidation projects.
• Define and implement PIM, CA, and least-privilege models.
• Produce client-ready design authority documentation and runbooks.
• Mentor consultants and review design artefacts.

Skills

Identity architecture

Hybrid identity

Stakeholder engagement

Cloud security

Design authority

Tools

Entra ID

Okta

Ping

Microsoft Graph

PowerShell

Job description

Seniority: Senior / Architect-level (Design Authority)

Experience: Minimum 15 years specialising in enterprise identity, with broader Microsoft cloud experience.

The Lead Identity Consultant provides strategic and technical leadership across enterprise identity architecture, spanning hybrid identity, identity governance, and cross-tenant and M&A scenarios. The role bridges deep technical design and delivery with client and stakeholder advisory, ensuring identity solutions are secure, resilient, and aligned to broader enterprise cloud and security strategy.

“a great place to work, a great place to be a customer”

Key Responsibilities:

• Lead design and delivery of Entra ID architecture, including hybrid identity (Entra Connect Sync, Cloud Sync), identity governance, and lifecycle workflows.
• Lead design and delivery of large-scale M&A consolidation projects.
• Proficient with modern protocols such as Kerberos, SCIM, OIDC, SAML and in-depth knowledge of token assurance and authorisation mechanics
• Architect cross-tenant and multi-tenant designs (MTO/CTS) for M&A, divestiture, and organisational restructuring scenarios.
• Define and implement Privileged Identity Management (PIM), Conditional Access, and least-privilege access models.
• Design governance frameworks for non-human and agentic identities, extending identity security practices beyond traditional user/device scope.
• Lead migration and cutover of complex identity transitions (e.g. MIM, Entra Connect to Cloud Sync) including multiple forests/tenants.
• Produce client-ready design authority documentation: architecture decisions, risk assessments, and runbooks.
• Lead and design configuration-as-code solutions for Entra/M365.
• Advise on identity aspects of security and compliance frameworks (CAF, Well-Architected Framework, Zero Trust).
• Collaborate with security, infrastructure, and application teams to align identity architecture with wider platform design.
• Mentor consultants and review technical documentation and design artefacts.

Key Skills & Experience:

• 15+ years in enterprise-scale identity architecture, ideally across multi-forest, multi-tenant, or regulated environments.

Deep understanding of:

• Entra ID architecture and hybrid identity (Entra Connect Sync, Cloud Sync, AD).
• Identity governance and lifecycle management (PIM, entitlement management, access reviews.)
• Cross-tenant and multi-tenant design for M&A and organisational change.
• Complex Active Directory designs and remediation scoping and actioning via structured planning methodology
• General Active Directory health, hardening, and remediation for enterprise-level clients.
• Non-human and agentic identity security and governance design and implementation.
• Microsoft 365 identity integration.
• Project management experience, including waterfall /Agile delivery methodologies and project delivery governance.
• Automation experience (PowerShell, Microsoft Graph) for identity operations, configuration-as-code, and migration tooling.
• Experience leading identity workstreams within larger cloud transformation or migration programmes.
• Strong documentation, stakeholder communication, and design authority experience.
• Okta, Ping or other identity management solutions desirable.
• Familiarity of enterprise PKI design and deployment.

Chess is one of the UK's leading independent and trusted technology service providers, employing over 280 skilled people across the UK, supporting over 18,000 UK businesses.

Diversity, equality, and inclusion is at the heart of our Chess culture, and we are passionate about our One Team spirit.

We’re extremely proud that our people voted us No.1 in 'The 100 Best Companies to Work for' list 2018, and we continue to celebrate more than 17 years in the top 100.

Our continued focus on growth creates opportunity for everyone to progress their career, to develop knowledge and skills, to gain reward and recognition and to maximise their potential. The growth and success of our people ensures the growth and success of our business.

We believe that “if you’re not growing, we’re not growing”.

Salary details:

Competitive salary based on experience plus bonus based on chargeability.

Your Benefits at Chess:

We care about your health, wellbeing, and career. Here’s what you’ll enjoy:

• Private healthcare (free after 1 year)
• Eye tests, flu jabs, and on-site health checks
• Mental health support from trained First Aiders
• Flexible working support with a home office allowance
• Buy or sell up to 5 holidays twice a year
• Perkbox discounts on shopping, travel, fitness, and more
• Points-based rewards from year 2
• Charity donation matching (up to £100)
• Recognition platform to celebrate your wins
• EE SIM offers for you and your family
• Learn 2 Earn scheme to boost your salary
• Team socials and celebrations
• Bespoke onboarding and leadership training
• Dedicated Culture Team to support you

A standard week is 37.5 hours, Monday to Friday.

This is a flexible, hybrid position with a home-first policy.

Allowing you to enjoy the flexibility of working from home whilst also having the option to work from one of our many local hubs spread throughout the UK. Ad-hoc travel to offices within the group and other locations may be required on occasion.

Interview Process:

As part of our hiring process, you may expect a face‑to‑face interview at one of our hubs. We understand that choosing the right opportunity is an important decision—and it works both ways.

This will give you the chance to meet the wider team and get a real feel for the Chess culture and day‑to‑day environment, helping you decide whether we’re the right fit for you as much as you are for us.

Is Chess the place for you?

If you are looking for a career that brings exciting challenges and opportunities, then Chess is the place for you.

Upon submission of your completed application to Chess, either through direct application or speculative, you hereby agree to the processing of your personal information as per the guidelines set out within our Privacy Policy and to allow for the seamless and secure processing of your information throughout Chess’s recruitment and hiring practices.

At Chess ICT, we value diversity and are committed to creating an inclusive workforce. We want to make sure everyone has a fair chance and opportunity throughout the application process. If you require any adjustments during your application or interview, please feel comfortable reaching out to our recruitment team so we can support you.