Identity Solution Architect

Seeking an Identity Solution Architect with experience designing and governing (IAM) architectures in complex hybrid multi-vendor environments.

Job details

The Department is seeking an Identity Solution Architect to lead architecture and design for the Identity and Access Management Modernisation (IAMM) Project, responsible for delivering:

• leading current-state, transition-state and target-state solution architecture;


• producing high-level and detailed solution designs;


• defining identity integration, authentication, provisioning and governance patterns;


• assessing design options, dependencies, constraints and technical risks;


• leading architecture and design reviews;


• maintaining traceability between requirements, architecture and detailed designs;


• providing technical direction to the engineers and delivery team.

The successful candidate (as Identity Solution Architect) will undertake the following duties and responsibilities

• Lead discovery, architecture and technical design workshops with business, architecture, cyber security, operational and support stakeholders.


• Assess the current identity architecture, integrations, controls, dependencies, operational processes and technical debt across Entra ID, Active Directory, MIM, AD FS and related identity and access management services (i.e. modern authentication, SSO, provisioning and identity lifecycle management).


• Develop and maintain current-state, transition-state and target-state architecture for the IAMM program, including identity lifecycle management, authentication, identity governance, SSO, provisioning and privileged access.


• Produce and maintain architecture artefacts including High Level Designs (HLDs), Detailed Solution Designs (DSDs), architecture diagrams, integration designs, data and attribute mapping specifications, migration designs and architecture decision records.


• Define the target identity architecture and integration patterns for authoritative sources, Joiner-Mover-Leaver processes, application onboarding, access governance, authentication and identity lifecycle management.


• Evaluate solution options, identify technical risks, dependencies and constraints, and provide recommendations to governance and architecture review bodies.


• Provide architecture and technical design assurance throughout solution build, testing, deployment, transition and operational handover.


• Work with engineers to review and validate detailed designs, configurations and implementation approaches to ensure alignment with the approved architecture.


• Draft, develop and maintain the IAMM System Security Plan (SSP), documenting system boundaries, architecture, information flows, security controls, control ownership and supporting accreditation evidence.


• Support development and maintenance of the Security Risk Management Plan (SRMP) and associated security assurance artefacts.


• Provide technical information and evidence to support IRAP assessments, penetration testing, remediation activities and Authority to Operate (AtO) processes.


• Ensure architecture, security and design documentation remains aligned with the implemented solution and is updated throughout delivery.

Support knowledge transfer, operational readiness and transition of the solution to support teams.

Technical skills

Experience designing and governing enterprise Identity and Access Management (IAM) architectures in complex hybrid multi-vendor environments. Deep knowledge of Entra ID, Active Directory, AD FS, MIM, modern authentication, identity governance, privileged access and SSO. Experience producing HLDs and DSDs, integration designs, SSPs, architecture artefacts & supporting security assurance, IRAP assessments & AtO activities. Certifications in Microsoft identity, Azure architecture or cyber security.

Contract

12 Month Contract with 1 x 12 months extension option

Security Required

NV1 Security Clearance required

Location

Canberra, Hybrid- Candidates may be permitted to work remotely up to 2-days per week.

Closing date

Tuesday 13October 2026