IAM Architect

Currently on the market for an IDAM Architect to join one of our largest clients within the retail industry for an initial 6 month contract, located in Melbourne.

Before applying, please have a good read over the JD, if it aligns to you, please apply!

About the Role

The IDAM Architect will be responsible for leading the architecture and strategic evolution of Microsoft cloud, identity and hybrid infrastructure across the group. Translate business and operational requirements into secure, resilient, scalable and cost-effective technology platforms that support corporate, retail and refinery environments. Define target-state architectures, standards and multi-year roadmaps, and provide design governance from concept through implementation and operational handover.

The role is accountable for the quality and integrity of infrastructure and identity designs, their alignment with enterprise strategy and standards, and the evidence used to assess security, availability, recoverability, performance, supportability and whole-of-life cost.

This is a delivery-focused architecture role with responsibility for shaping and governing cloud, identity and hybrid infrastructure outcomes across the organization. The role combines strategic roadmap development, solution architecture, design assurance, technical governance and delivery support. It requires sufficient technical depth to engage credibly with engineers and service providers, together with the judgement and communication capability to support investment, risk and architecture decisions.

Key responsibilities:

• Develop current-state assessments, target-state architectures and rolling three-to-five-year cloud, identity and infrastructure roadmaps aligned with business strategy and investment priorities
• Own and maintain architecture principles, reference architectures, reusable patterns and technology lifecycle standards. Identify technical debt, unsupported platforms, control gaps and consolidation opportunities
• Prepare options papers, high-level and detailed designs, architecture decision records and business-case inputs that clearly explain trade-offs, dependencies, risks, licensing impacts and whole-of-life costs
• Present recommendations to architecture, cyber security and technology governance forums. Document decisions, exceptions, residual risks and accountable owners, and secure required approvals before implementation
• Design and govern Azure landing zones, including tenant and subscription structures, management groups, policy, role-based access, tagging, budgets, platform guardrails and deployment standards
• Define workload-placement patterns across Azure and on-premises platforms based on business criticality, data classification, availability, latency, integration, regulatory and cost requirements
• Architect compute, storage, connectivity, name resolution, observability, backup and recovery capabilities in partnership with cloud, network, cyber security and hosting teams
• Partner with IDAM service owners to define architectures for Active Directory, Microsoft Entra ID, hybrid identity, federation, synchronisation, authentication, authorisation and identity lifecycle management
• Design privileged access, administrative tiering, least-privilege access, service identity and emergency-access patterns aligned with Zero Trust principles and separation-of-duties requirements

About You:

• Substantial enterprise infrastructure experience, including demonstrated architecture accountability for Azure, Microsoft identity and hybrid infrastructure environments. Equivalent depth of experience will be considered
• Proven delivery of Azure landing zones, cloud governance, hybrid identity integration, migrations and resilient infrastructure solutions within complex, multi-site organisations
• Strong practical knowledge of Windows Server, Active Directory Domain Services, Microsoft Entra ID, Entra Connect or Cloud Sync, and Microsoft 365 infrastructure dependencies
• Demonstrated ability to design across identity, networking, compute, storage, backup, disaster recovery, cyber security, monitoring and service management domains
• Experience with infrastructure as code, PowerShell, version control and deployment pipelines, with the ability to review technical implementations and guide engineering teams
• Ability to design secure, scalable, resilient and highly available cloud and hybrid solutions across Microsoft Azure and enterprise infrastructure environments
• Deep knowledge of identity architecture, including Microsoft Entra ID, Active Directory, hybrid identity, authentication, authorisation, single sign-on, federation, MFA, Conditional Access and identity lifecycle management.
• Ability to apply Zero Trust principles across identity, device, application, network and privileged-access controls, with a strong focus on least privilege and continuous verification.