Digital Identity Specialist (Consultant/Architect)

Job description

Summary At Avanade, cybersecurity consultants are innovators, and challengers of the status quo. If you’re an experienced Digital Identity Specialist , who can help our clients solve complex challenges, this might be the perfect opportunity for you. In a client-facing consulting role, you will work on exciting projects that transform our client’s solutions with a focus on the Microsoft Digital Identity capabilities as well as other leading market vendors (e.g. Saviynt & One Identity). As a member of our security practice, you will work for both Avanade and Accenture clients, ranging from medium to large global enterprise clients. Join a curious and diverse team that’s passionate about next-gen tech and establish yourself as a Leader in the Digital Identity space. Together, let’s transform cybersecurity. Key Responsibilities Design enterprise identity and access management solutions using Entra ID with a focus on security and efficiency. Develop comprehensive identity architecture roadmaps to uplift and modernize access control systems across the organization, aligning with business growth and security requirements. Utilise Entra ID capabilities to develop control policies and authorisation frameworks in accordance with the principles of least privilege and zero trust. Participate in client workshops and discovery sessions, translating business, technical, and compliance requirements into value-driven architectures. Design and deploy advanced authentication solutions leveraging OAuth2.0, SAML, and OIDC protocols. Develop Identity and Access Management (IAM) solutions utilizing Entra External ID capabilities. Create target-state architectures, roadmaps, and high-level/low-level designs. Communicate effectively and collaborate with team members and stakeholders. Work within agile methodologies, contributing to backlog items and continuous improvement. . Skills & Experience Proven experience in Identity and Access Management (IAM), with a strong focus on Microsoft Entra ID (Azure AD) Experienced in consulting and advisory discussions with clients and other consulting firms. Proven understanding of Active Directory and legacy authentication protocols (LDAP, Kerberos, NTLM, etc.), Entra ID Sync, Demonstrated expertise with Entra ID and Entra ID Domain Services, including relevant use cases. Skilled in managing identities, setting up conditional access, implementing multi-factor authentication, and overseeing identity governance with Microsoft Entra ID. Experience with modern authentication protocols and integrating applications using those protocols. Experience leading small to medium project general design and delivery (solution architecture and associated infrastructure or business and functional requirements). Understanding of the business, privacy, security, and compliance challenges surrounding Digital Identities and a passion for solving these challenges for clients. Experience of privileged access management solutions and an understanding of secrets management. About you Deep technical knowledge of Microsoft identity management functionality, capabilities, and limitations. Proficiency in modern authentication protocols such as OAuth2.0, SAML and OIDC. Experience with Microsoft Entra ID, including SSO and authentication methods. Experience with Active Directory security, management, GPO’s, OU Structure etc. Familiarity with Entra Application Provisioning and SCIM. Ability to manage various types of identities using Microsoft Entra ID. Skilled in automation and scripting with PowerShell and Azure tools. Understanding of basic security principles and secure coding practices. Knowledge of IAM lifecycle management concepts. Strong analytical and problem-solving skills for IAM issues. Good communication skills for effective teamwork and stakeholder engagement. Nice to have Experience with additional IAM platforms such as Auth0, Ping Identity, or ForgeRock. Scripting and automation capabilities using Python, PowerShell, or similar languages to extend IAM functionality. Experience implementing customer identity and access management (CIAM) solutions for consumer-facing applications. * Australian citizenship is required, and candidates must be eligible to obtain security clearance. (Existing security clearance is preferred but not mandatory) .