Identity & Access Management Architect

Responsibilities:

• Design, Build, and Deploy Identity Domains: Stand up two new domains—Operational Technology (OT) domain for administrative accounts and Shared Services domain for cross-environment authentication.
• Account Migration & Domain Consolidation: Migrate accounts from existing IT domains to the new environments, ensuring seamless integration and security.
• Active Directory & Azure Integration: Manage and integrate on-premises Active Directory with Azure AD, ensuring a hybrid identity solution.
• Domain Controller & Infrastructure Setup: Stand up root domain controllers and core infrastructure from scratch for both new domains.
• Privileged Access Management (PAM): Implement and manage CyberArk or equivalent Privileged Access Management solutions to enhance security.
• Scripting & Automation: Develop and refine automation scripts using Python, PowerShell, or VBScript for domain management, migrations, and identity automation.
• Security & Compliance: Ensure that identity solutions comply with industry security standards and best practices.
• Tooling & Customisation: Refactor and integrate existing custom scripts, tools, and APIs to align with the new domain structure.
• Collaboration & Consulting: Work closely with cross-functional teams to define and implement identity and authentication strategies.

Qualifications / Requirements:

• 10+ years of experience in Identity & Access Management, Active Directory, and authentication solutions.
• Expertise in Active Directory (AD), Azure AD, domain migrations, and hybrid identity integration.
• Experience with on-premises and cloud identity security frameworks.
• Proficiency in Python, PowerShell, or other scripting languages for automation and identity management.
• Strong troubleshooting and analytical skills for domain setup, migrations, and security configurations.
• Experience with API integrations related to identity and access solutions.
• Excellent communication and documentation skills.
• Some travel may be required.

Preferred

• Understanding of Privileged Access Management (PAM) solutions such as CyberArk.