Solution Architect IAM Operations

Job description

IDC IAM Architect 1. Role Purpose The L4 technical authority for delivering Identity Services change now. The role takes the programme\'s immediate security objectives, assesses the live environment, designs the solution needed to solve the problem at hand and gets it implemented. Depending on scale and risk, they either implement alone or in partnership with the Managed Service Provider. They work autonomously and own the outcome. The role works side by side with the Operational Delivery Owners. They run the business, and this role transforms the business. 2. Why the Role Exists • A security-heavy programme has short-term objectives that need significant identity change, with some digital workplace impact. • The Head of End User Computing lacks the bandwidth to design and validate it personally. • Delivery needs someone who can read live systems and design changes that are safe for production. • Operational teams need to stay focused on running services while a dedicated expert leads the change. 3. Key Responsibilities Architecture and Design • Design practical, short-term architecture to solve the problem at hand across identity services, on-premises and cloud. • Establish the true current state from live configuration, including risks, drift and technical debt. • Produce designs, runbooks, impact assessments and rollback plans. • Record key technical decisions. Implementation and Technical Leadership • Decide the delivery approach for each change, based on scale and risk: • Alone: implement complex or high-risk changes personally. • In partnership: work with the Managed Service Provider, giving clear step-by-step instructions and validation criteria, and quality-assuring the results. • Act as the L4 technical escalation point for change-related issues. • Coach Managed Service and IDC colleagues. Security Programme Delivery • Work with the Security Program & Project Manager to turn the Information Security Manager\'s requirements into an operable technical reality. • Deliver specific, agreed jobs within a reasonable time. • Confirm with Security that each delivered change meets the requirement. Security owns the overall security posture. Collaboration with Operational Delivery Owners • Plan change around live service needs and minimise operational impact. • Hand over changed services with documentation and knowledge transfer, so they can run them in BAU. • Use their operational insight in designs, so what is built is supportable. Planning and Governance • Break objectives into work packages with estimates and dependencies. • Report status and risks clearly to the programme and senior stakeholders. • Follow change governance. 4. Technical Scope • Identity (core): Active Directory and Microsoft Entra ID, including hybrid environments, authentication and access controls. • Security: Identity security controls, hardening and compliance. • Automation: Scripting and tooling to deliver and maintain the changes. • Digital Workplace (strong nice to have): Device and endpoint management (Intune) and policy management (Group Policy). 5. Skills and Experience Essential • 10+ years in enterprise infrastructure or identity, 5+ at architect or lead level. • Expert in Active Directory and Entra ID in complex hybrid environments. • Proven delivery of large-scale security-driven change. • Can analyse live systems and design safe change without complete documentation. • Hands-on scripting and automation skills. • Experience working in partnership with Managed Service teams and quality-assuring their work. • Excellent English communication, and works independently. Strong Nice to Have • Working knowledge of Intune and Group Policy. Desirable • Relevant Microsoft certifications (e.g. SC-300, AZ-500, MD-102). • Security framework knowledge (NIST, CIS, ISO 27001). • ITIL and global delivery centre experience. 6. Behaviours Ownership (delivers, not just designs) | Autonomy | Pragmatism | Precision in production change | Calm under pressure Key Responsibilities Skill Requirements Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Advertising Cookies Provider Description Enabled Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provider GoogleAnalytics Google Tag Manager Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketi