Principal IAM Architect

Job not on LinkedIn

🔥 5 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

National Trust

WebsiteLinkedInAll Job Openings

10,000+ employees

🤲 Charity

🏨 Hospitality

🛒 Retail

Charity • Hospitality • Retail

National Trust is Europe’s largest conservation organisation and a registered charity that protects and opens historic houses, gardens, parks, countryside and cultural heritage across England, Wales and Northern Ireland. It operates a wide range of visitor services — including food & beverage, retail, holidays, visitor experience and educational programming — and runs estate management, conservation, fundraising, volunteer and apprenticeship programmes to care for places and engage millions of visitors each year.

📋 Description

• Design and own the enterprise IAM architecture • Lead architecture for hybrid identity environments • Define standards and reference architectures for SSO, MFA, conditional access, and Zero Trust access models • Architect and oversee Identity Governance and Administration (IGA) programs • Partner with security, compliance, and legal teams to ensure IAM architecture supports regulatory requirements • Evaluate, select, and integrate IAM tooling into a cohesive architecture • Provide technical leadership and mentorship to IAM engineers and administrators • Lead cross-tenant and M&A identity integration efforts • Develop and maintain IAM architecture documentation, standards, and governance frameworks • Act as a subject matter expert in IAM-related incident response and access-related risk assessments • Stay current on identity threat landscape and adjust architecture accordingly

🎯 Requirements

• 10+ years in IT/security roles • 5+ years focused specifically on IAM architecture • Deep expertise with Microsoft identity platforms: Entra ID (Azure AD), Entra ID Governance, Conditional Access, and Cross-Tenant Synchronization • Strong background in directory services, federation protocols (SAML, OAuth 2.0, OIDC, SCIM), and PKI • Hands-on scripting/automation experience (PowerShell, Microsoft Graph API, or equivalent) • Experience architecting solutions across multiple tenants/domains • Familiarity with privileged access management tools and least-privilege design principles • Experience with compliance-driven identity controls • Excellent communication skills, with experience presenting architecture decisions to executive stakeholders

🏖️ Benefits

• Medical, Dental, and Vision insurance • 401(k) • Life and disability insurance