Architect -IAM - Identity Provider (On-Premise & Cloud)

Opdrachtomschrijving

Voor Rabobank in Utrecht zoek je als Solution Architect IAM naar de Identity Provider-omgeving, zowel on-premise als in de cloud. Binnen de IAM Tribe geef je vorm aan de architectuur van de identity services van de bank. Je vertaalt de strategische koers van IAM, enterprise-architectuurprincipes en de langetermijnvisie op technologie naar concrete solution designs.

Je werkt op het snijvlak van Enterprise Architecture en DevOps. Vanuit die positie bied je architecturale richting aan meerdere squads en ondersteun je de ontwikkeling en implementatie van IAM-capabilities. Je neemt deel aan de IAM Architecture Board en werkt in het squad steering triangle samen met Product Managers en IT Leads aan de koers en doorontwikkeling van de dienstverlening.

De opdracht richt zich op een toekomstbestendig Identity Provider-landschap voor on-premise, hybride en cloudomgevingen. Je draagt bij aan target-state-architecturen, roadmaps en architectuurbesluiten en bewaakt daarbij samenhang, standaardisatie, vereenvoudiging, veerkracht, beveiliging en aansluiting op enterprise- en compliancekaders. De werkomgeving is hybride volgens het Rabobank @anywhere-principe.

Gevraagd profiel

Je bent een ervaren Solution Architect die opereert in grootschalige enterpriseomgevingen en diepgaande kennis heeft van Identity and Access Management. Je hebt ruime ervaring met Identity Provider-technologieën zoals Microsoft Entra ID en Active Directory, evenals met federatie, authenticatie- en autorisatieprotocollen, PKI, MFA, disaster recovery, resiliency en identity security. Ervaring met gereguleerde omgevingen, identitytransformaties en cloudmigraties sluit goed aan.

Je combineert analytisch vermogen met een security-first houding en kunt complexe scenario’s vertalen naar heldere architectuurkeuzes. Je beweegt gemakkelijk tussen engineers, architecten, productmanagers, IT-leads en senior stakeholders, beïnvloedt zonder formele macht en geeft technische richting aan meerdere DevOps-squads. Je werkt en communiceert professioneel in het Engels.

Eisen

• English is mandatory
• The assignment is not suitable for ZZP candidates
• Candidates must be available for the full duration of the assignment
• Candidates may only start after successfully completing the pre-employment screening process
• The candidate must possess a valid passport or identity card, valid both at intake and on the contract start date
• Payroll-midlance constructions are not permitted
• Candidate may only be submitted to one Rabobank request at a time and, during the four-working-day exclusivity period, may only be submitted to Magnit - Rabobank
• The personal motivation and CV must be provided in English
• The candidate must have proven experience as a Solution Architect within large-scale enterprise environments
• The candidate must have a deep understanding of Identity and Access Management concepts, identity lifecycle management, authentication, authorization, and federation
• The candidate must have strong expertise in Microsoft Entra ID, Active Directory, federation, and hybrid identity architectures
• The candidate must have demonstrated experience defining target architectures, architectural roadmaps, reference architectures, and solution designs aligned with strategic and security objectives
• The candidate must be able to provide technical leadership and architectural guidance across multiple DevOps squads
• The candidate must have experience operating in highly regulated environments where security, compliance, resilience, risk management, and auditability are critical
• The candidate must have strong analytical skills and be able to evaluate complex scenarios, balance trade-offs, and make architecture decisions based on business and technical considerations
• The candidate must have excellent communication and stakeholder management skills and be able to engage effectively at all levels of the organization
• The candidate must be able to influence without direct authority and align diverse stakeholder groups around a common architectural direction
• The candidate must have experience with disaster recovery, business continuity, PKI, MFA, Zero Trust, and cloud security principles

Wensen

• Familiarity with architecture frameworks such as TOGAF is considered an advantage
• Experience with large-scale identity transformations and cloud migration initiatives is preferred
• Knowledge of modern authentication standards and protocols such as OAuth 2.0, OpenID Connect, SAML, and FIDO2 is preferred
• Understanding of Zero Trust architecture principles and identity-centric security models is preferred
• Relevant certifications such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent are preferred