Lead Identity Solution Architect

About the role

A major enterprise is seeking a Lead Identity Solution Architect to drive a large-scale identity transformation, assessing and designing the migration from SailPoint to Microsoft Entra ID Governance. This is a key leadership role defining the target-state architecture, migration strategy and technical direction, working with platform owners, security teams, architects and business stakeholders. It is advertised as a contract position based in Docklands, Australia.

Key responsibilities

• Lead the assessment of the current SailPoint environment, including architecture, connectors, workflows, custom rules and dependencies.
• Define the target-state architecture for Microsoft Entra ID Governance and develop the migration roadmap.
• Design and document Workday-driven Joiner, Mover & Leaver (JML) processes and identity lifecycle workflows.
• Lead discovery and solution design for cloud identity integrations, including GCP, AWS and enterprise applications.
• Assess account provisioning, entitlement management and authentication requirements across platforms.
• Design and recommend SCIM, gallery-based and custom provisioning patterns for priority applications.
• Define security controls, service permissions, logging standards, environment strategy and automation patterns using Microsoft technologies.
• Develop migration, coexistence and cutover strategies and present recommendations and PoC findings to stakeholders.

Required profile

• 10+ years' experience in Identity & Access Management (IAM), with enterprise-scale identity transformation programs.
• Proven experience as a Lead or senior solution architect delivering identity governance and administration (IGA) solutions.
• Experience assessing SailPoint environments and translating them into Microsoft solutions.
• Excellent stakeholder engagement and communication skills.

Required skills

• Deep expertise in Microsoft Entra ID Governance, Entra ID (Azure AD) and hybrid identity environments.
• Understanding of JML processes and HR-driven provisioning (Workday).
• Knowledge of SCIM, REST APIs, identity correlation and cloud identity integration.
• Desirable: SailPoint to Entra ID migration experience, banking or financial services background, AWS and GCP identity integration, Microsoft Identity or Security certifications, and previous Microsoft or Microsoft consulting experience.

The role offers a long-term engagement within a multi-year program, with ownership of the architecture, migration strategy and future-state identity vision. Applications are handled through the recruiter named in the original listing.