IAM Architect in Basingstoke

Job Description & Access Management Architect Up to £90k + 15% Annual Bonus Basingstoke, Hampshire Once a week onsitemiddle has partnered with a global enterprise organisation to hire an (IAM) & Access Management Architect, who will take ownership of the on-premises Active Directory estate within a complex hybrid environment. There will be crossover across Microsoft Entra ID and Active Directory, working closely with cloud and infrastructure teams to evolve the broader IAM strategy.In this role, you will have the independence to identify and implement new technologies, process improvements and automation across the domain. Youll have the opportunity to build a robust, modern and secure IAM platform that can automate, protect and scale across the enterprise.The Role Lead modernisation and optimisation of the enterprise Active Directory infrastructureDrive improvements across hybrid (on-prem & cloud synchronisation and source of authority evolution)Design and deliver complex infrastructure projects (e.g. certificate authority rollout, domain consolidation, authentication modernisation)Evaluate and implement modern authentication methods such as FIDO2Support integration across manufacturing and operational technology (OT) environmentsLead infrastructure initiatives end-to-end, owning delivery from initial concept and design through to implementation and operational handoverCollaborate on infrastructure pipelines and automationContribute to strategic and roadmap decisions for the enterprise IAM estateMentor junior engineers and shape engineering standardsManage stakeholders across IT, OT, Senior Leadership, Information Security, Cyber, Cloud Infrastructure, and third-party vendorsThe Ideal Candidate Must Have: Extensive enterprise-level experience across Microsoft Entra ID and Active Directory, covering architecture, implementation, governance and roadmap ownershipProven architectural background in designing infrastructure solutionsExperience delivering modernisation at scaleTrack record leading complex infrastructure projects from inception to completionExperience operating within large, global enterprise environmentsEnterprise-level Joiner, Mover, Leaver (JML) automation integrationsStrong understanding of IAM security principles, including governance, least privilege, Zero Trust, modern authentication, and alignment to recognised security frameworksExperience delivering Privileged Access Management (PAM) solutions at scaleStrong stakeholder communication skillsAbility to mentor and elevate junior engineersNice to Have: Exposure to FIDO2 or modern passwordless authentication methodsExperience with ManageEngine or DelineaIdentity-related certificationsWhy Join? Opportunity to modernise a large-scale enterprise Active Directory estate with significant improvement potentialWork across both traditional IT and complex manufacturing/OT environmentsInfluence long-term hybrid strategyOperate at enterprise scale with real architectural impactYou must already have the right to work in the UK. No sponsorship is available. Principal IAM Engineer, Active Directory Architect, Enterprise Engineer, Hybrid Architect, Infrastructure Lead, Senior IAM Engineer, Security Engineer.TPBN1_UKTJ