Lead IAM Architect

Client: MASTEK Role: Permanent Salary: 80K GBP Per Annum (incl 10% variable) Location: Scotland (once or twice a month) Key expectations Lead MFA and SailPoint discovery and design. Create one joined-up IAM architecture across Microsoft Entra, MFA, Microsoft Authenticator, FIDO2 tokens, Active Directory, F5/Legacy access routes, SailPoint ISC and Application A. Define the MFA target design, including policy, authentication methods, exceptions, privileged users, recovery and operational controls. Define the SailPoint target design for Application onboarding, including AD groups, RBAC, Access Profiles, roles, workflows and approvals. Ensure the MFA and SailPoint designs work together and do not create conflicting AD-group, access-governance or privileged-access models. Model and implement risk based authentication policies in Azure Entra. Lead technical workshops and document architecture decisions. Produce technical design documentation and maintain the design-decision log. Support Design Authority approval. Provide targeted technical assurance during implementation, resolving complex decisions and reviewing significant deviations from design. Support RFC, CAB, security assurance, implementation planning, rollback planning and technical handover where required. Be hands on in implementing MFA entra, policies, application onboarding and others. Minimum experience 10+ years in IAM, identity architecture, cyber security or enterprise security architecture. 5+ years designing ..... full job details .....