Senior Identity Security Architect (Hybrid)

FSP; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working

Career development

Competitive salary & benefits

Job summary

FSP is seeking a Senior Identity Security Engineer to design and implement large-scale identity environments across AD, Entra ID and PKI/ADCS. You will lead modern authentication adoption, cloud-first strategies and secure certificate services in hybrid setups.

You will work with engineering and operations teams, integrating Okta, Ping Identity, Duo and other identity services, while guiding secure design decisions and governance for clients.

Qualifications

• Deep expertise across AD, Entra ID and PKI/ADCS in large environments.
• Ability to diagnose and resolve identity issues end-to-end in hybrid platforms.
• Strong communication across architecture, engineering and operations teams.

Responsibilities

• Design and architect modern Microsoft identity platforms and roadmaps.
• Integrate third-party identity services like Okta, Ping, Duo, Auth0.
• Assess and improve identity environments, reducing risks and debt.
• Engineer PKI and certificate lifecycle at scale, incl. automation.
• Plan migrations and legacy exits away from legacy AD forests.
• Drive passwordless and modern authentication strategies.
• Evolve cloud-first identity models and secure workloads.
• Automate identity and certificate ops with DevSecOps and IaC.
• Advise clients on IAM best practices and regulatory requirements.

Skills

Active Directory

Entra ID

PKI/ADCS

PowerShell

CI/CD

IaC

DevSecOps

Cloud platforms

Authentication methods

Passwordless

Tools

Okta

Ping Identity

Duo

Auth0

Yubico

Job description

FSP is seeking a Senior Identity Security Engineer to design and implement large-scale identity environments across AD, Entra ID and PKI/ADCS. You will lead modern authentication adoption, cloud-first strategies and secure certificate services in hybrid setups.

You will work with engineering and operations teams, integrating Okta, Ping Identity, Duo and other identity services, while guiding secure design decisions and governance for clients.