Identity and Access Management Architect

Job Title: IAM Architect

Job Type: Contract 4 days a week

Job Location: 4 days remote- occasional travel to Finland

Contract Rate: Euro's 700 per day

CLIENT REQUIRES EU CITIZENS

Identity & access management architect

• Design and oversee the implementation of identity and access management (IAM) solutions in Azure, including Azure Active Directory (Azure AD), Conditional Access, Privileged Identity Management (PIM), and role-based access control (RBAC).
• Ensure alignment of IAM strategies with ECs enterprise architecture, governance, and security models.
• Define and implement policies for authentication, authorisation, identity lifecycle management, and federation across cloud and hybrid environments.
• Apply FinOps principles by recommending IAM solutions that balance security, scalability, and cost-effectiveness within EC’s Azure environment.
• Collaborate with infrastructure, security, and application teams to ensure consistent identity integration, seamless user experience, and secure access across systems.
• Contribute to the IAM roadmap and Azure transition planning, ensuring interoperability with legacy systems and compliance with regulatory requirements (e.g. GDPR, EU security frameworks).

Minimum requirements: Experience and language skills

• At least 5 years of experience as an identity and access management architect / senior engineer performing above key tasks.

Key responsibilities

• Provide architectural input to IAM-related projects, with a specific focus on transitioning from custom-built IAM system to a modern, cloud-native solution using Azure AD and related services.
• Contribute to the analysis, design, and planning of the decoupling of legal entity and contact management functionalities from the existing IAM solution, supporting their re-architecture as independent, modular capabilities.
• Support alignment of IAM practices with EC’s enterprise architecture principles, cybersecurity policies, and cloud strategy.
• Guide integration of Azure services such as Conditional Access, Privileged Identity Management (PIM), and B2B and/or B2C federation into the future IAM landscape.
• Advise on IAM governance models and policy definition to ensure secure authentication, authorization, and identity lifecycle management across hybrid environments.