Architect -IAM - Identity Provider (On-Premise & Cloud)

1UP Training (Netherlands); Utrecht; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Rabobank is seeking a Solution Architect IAM – Identity Provider to shape identity services across on-premises, hybrid and cloud environments. The role requires translating strategic objectives into practical designs and providing architectural leadership to DevOps squads.

You will ensure security-first approaches, align with regulatory requirements, and guide teams in decision-making while maintaining enterprise standards and risk controls.

Qualifications

• Deep IAM knowledge including lifecycle management, authn, authz and federation.
• Experience in large-scale enterprise environments with security, compliance and auditability.
• Strong communication and ability to influence across teams.

Responsibilities

• Define and maintain IAM architectures aligned with enterprise principles and security standards.
• Guide DevOps squads through implementation and ensure architectural integrity from design to delivery.
• Develop roadmaps and target-state designs for Identity Provider across on-prem, hybrid and cloud.

Skills

IAM knowledge

Security principles

Stakeholder management

Architectural leadership

DevOps guidance

Tools

Microsoft Entra ID

Active Directory

OAuth 2.0

OIDC

SAML

FIDO2

Job description

Solution Architect IAM – Identity Provider (On-Premise & Cloud)

Location: Utrecht
Working hours: 36 hours per week
Working arrangement: Hybrid
Language: English is required

About the role
As Solution Architect for the IAM Identity Provider domain, you will shape the architecture of identity services across on-premises, hybrid and cloud environments. You will translate strategic objectives into practical solution designs and provide architectural leadership to DevOps squads and stakeholders.
You will help teams make sound technology decisions while maintaining alignment across products, platforms and squads. You will bring a security-first mindset to innovation and modernization, ensuring that solutions meet enterprise standards, regulatory requirements and risk frameworks.

Key responsibilities

Define and maintain solution architectures aligned with enterprise architecture principles, security standards and IAM strategy.
Guide DevOps squads through implementation and maintain architectural integrity from design to delivery.
Provide technical leadership and advice to the squads you support.
Develop architectural roadmaps and target-state designs for the Identity Provider landscape across on-premises, hybrid and cloud environments.
Assess alternative scenarios, evaluate trade-offs and provide clear architectural recommendations.
Coach and mentor engineers and technical specialists to strengthen engineering quality and architectural maturity.
Promote standardization, simplification, resilience and security across IAM platforms and services.
Identify opportunities to modernize identity solutions.

Your profile

Proven experience as a Solution Architect in large-scale enterprise environments.
Deep knowledge of IAM, including identity lifecycle management, authentication, authorization and federation.
Strong expertise in Microsoft Entra ID, Active Directory, federation and hybrid identity architectures.
Experience defining target architectures, roadmaps, reference architectures and solution designs aligned with strategic and security objectives.
Ability to provide architectural guidance across multiple DevOps squads.
Experience in highly regulated environments where security, compliance, resilience, risk management and auditability are critical.
Strong analytical skills and the ability to balance business and technical considerations when making architecture decisions.
Excellent communication and stakeholder management skills, with the ability to influence without direct authority.
Experience with disaster recovery, business continuity, PKI, MFA, Zero Trust and cloud security principles.

Preferred qualifications

Experience with large-scale identity transformations and cloud migration initiatives.
Knowledge of modern authentication standards and protocols, such as OAuth 2.0, OpenID Connect, SAML and FIDO2.
Familiarity with architecture frameworks such as TOGAF.
Relevant certifications, such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent.

Eisen

• English is mandatory
• Candidates must be available for the full duration of the assignment
• Candidates may only start after successfully completing the pre-employment screening process
• The candidate must possess a valid passport or identity card, valid both at intake and on the contract start date
• Payroll-midlance constructions are not permitted
• Candidate may only be submitted to one Rabobank request at a time and, during the four-working-day exclusivity period, may only be submitted to Magnit - Rabobank
• The personal motivation and CV must be provided in English
• The candidate must have proven experience as a Solution Architect within large-scale enterprise environments
• The candidate must have a deep understanding of Identity and Access Management concepts, identity lifecycle management, authentication, authorization, and federation
• The candidate must have strong expertise in Microsoft Entra ID, Active Directory, federation, and hybrid identity architectures
• The candidate must have demonstrated experience defining target architectures, architectural roadmaps, reference architectures, and solution designs aligned with strategic and security objectives
• The candidate must be able to provide technical leadership and architectural guidance across multiple DevOps squads
• The candidate must have experience operating in highly regulated environments where security, compliance, resilience, risk management, and auditability are critical
• The candidate must have strong analytical skills and be able to evaluate complex scenarios, balance trade-offs, and make architecture decisions based on business and technical considerations
• The candidate must have excellent communication and stakeholder management skills and be able to engage effectively at all levels of the organization
• The candidate must be able to influence without direct authority and align diverse stakeholder groups around a common architectural direction
• The candidate must have experience with disaster recovery, business continuity, PKI, MFA, Zero Trust, and cloud security principles

Gunningscriteria

• Familiarity with architecture frameworks such as TOGAF is considered an advantage
• Experience with large-scale identity transformations and cloud migration initiatives is preferred
• Knowledge of modern authentication standards and protocols such as OAuth 2.0, Open
• ID Connect, SAML, and FIDO2 is preferred
• Understanding of Zero Trust architecture principles and identity-centric security models is preferred
• Relevant certifications such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent are preferred