CIAM Architect

We are supporting our client in their search for a CIAM Architect. The role will be a 12-month contract.

Key Responsibilities:

• Own the end-to-end solution architecture for Entra ID Conditional Access as the PBAC policy decision and enforcement layer.
• Define the governance framework, naming and tagging standards for Conditional Access policies and security groups.
• Design the persona and ring-based Conditional Access model aligned to Microsoft Zero Trust best practices.
• Define the target security-group model, membership rules and attribute sources feeding policy decisions.
• Establish management controls, ownership model, RACI and attestation approach across the estate.
• Lead design authority reviews, resolve technical conflicts and approve deviations from standard.
• Define the phased deployment strategy including report-only validation, ring gating and rollback criteria.
• Act as principal technical interface to Euronext architecture, security and application stakeholders.
• Provide oversight of documentation quality and approve all architecture and technical design artefacts.
• Mentor consultants and developers and provide escalation into the TCS IAM Centre of Excellence.

Key Skills:

• Deep expertise in Microsoft Entra ID (Azure AD), Conditional Access and Identity Protection.
• Proven experience designing Zero Trust access architectures for large enterprises.
• Strong understanding of policy-based and attribute-based access control models.
• Experience with security-group governance, entitlement design and access certification.
• Working knowledge of Microsoft Intune, device compliance and named-location baselines.
• Demonstrable experience leading identity transformations in regulated or financial-services environments.
• Excellent stakeholder management and executive communication skills.