Identity Architect

Identity Architect

Remote – Must be UK based

£70,000 – £80,000

* Are you an experienced Identity Architect with deep, hands-on Microsoft Entra ID expertise?

* Have you led a complex Microsoft 365 tenant consolidation rather than simply supporting one part of the project?

* Do you also have practical experience with Okta Identity Engine and modern passwordless authentication?

We are recruiting for a growing Microsoft-focused technology consultancy delivering complex workplace, identity and security projects for international clients.

They are looking for a senior Identity Architect to lead the identity workstream of a global Microsoft 365 tenant consolidation programme.

This is a senior technical role where you will become the authority for identity architecture, authentication, security controls and migration strategy across the project.

It is not a role where you will simply produce a design and hand it over.

You will remain close to the technology, guiding the engineering teams through implementation and cutover while also getting involved in configuration, proofs of concept and troubleshooting when needed.

The programme will involve consolidating three Microsoft 365 tenants into one secure and scalable target environment.

You will be responsible for designing the Entra ID architecture, including Conditional Access, Identity Protection, RBAC, privileged access, cross-tenant collaboration and the Microsoft 365 Multi-Tenant Organisation.

Okta is also a significant part of the environment, so you must have genuine, practical experience with Okta Identity Engine. This should include policies, authenticators, complex sign-in flows and federation between Okta and Microsoft.

The organisation is moving towards a modern authentication model, including passkeys, FIDO2, Okta FastPass and stronger passwordless user journeys.

You will also lead discovery and technical workshops, manage identity-related risks and decisions, and produce clear documentation including HLDs, LLDs, architecture diagrams, runbooks and operational guides.

To be considered, you will need:

* In-depth Microsoft Entra ID experience within complex enterprise environments

* Previous responsibility for a Microsoft 365 tenant consolidation

* Strong practical experience with Okta Identity Engine

* Experience designing and implementing a Microsoft 365 Multi-Tenant Organisation

* Passwordless authentication experience, including FIDO2, passkeys or Okta FastPass

* Experience working across global or multi-geo Microsoft 365 environments

* The confidence to lead workshops and influence senior client stakeholders

Experience with hybrid Active Directory, PowerShell automation, Microsoft Defender and broader identity governance would be useful, but the core requirement is somebody who can combine architecture, technical leadership and hands-on delivery.

This is an opportunity to take ownership of a significant global identity programme within a growing consultancy where your technical judgement will carry weight