Identity Architect

About the Opportunity

• Contract Identity Architect role supporting a large, complex organisation in Auckland CBD
• Own IAM architecture across workforce identity (WIAM) and customer identity (CIAM)
• Microsoft-centric environment: Entra ID (Azure AD), Azure, M365, hybrid with on-prem AD
• CIAM platform supports ~500,000 users; workforce estate ~10,000–11,000 identities
• Contribute to cloud transition and access governance uplift (incl. IGA program in flight)

What You’ll Bring

• Proven experience delivering IAM architecture outcomes (not just advisory)
• Strong Microsoft identity depth: Entra ID/Azure AD, AD, Conditional Access, Azure RBAC
• Solid knowledge of authentication and federation standards: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP
• Experience designing access models and controls: RBAC/ABAC, JML, SoD, least privilege
• Confident stakeholder engagement—workshopping, ...