IAM Solution Architect

Tasks

As IAM Solution Architect you are responsible for mapping out our client's requirements for identity and access management and translating this into a solution design for IAM solutions. You provide clarity for both the architecture board, the client and your team through the start architecture you write. You start with a high level architecture and deepen it step by step to enable Agile working. Your design is well aligned with the IAM domain architect and therefore fits well with the IAM target architecture and the enterprise (digital) architecture of the organization. You facilitate and effective dialogue with the customer and Product Owner IAM about the customer requirements and functionalities and work together with the IAM technical specialists in the Scrum team to develop a well-documented solution design. You also work with architecture, security and other governance parties to ensure that security and privacy are properly secured and (BIO) compliant solutions are delivered. You know how to translate functional questions into working solutions in a large and complex data center environment such as that of Rijkswaterstaat. You know how to identify dependencies and specify their required contribution. You will help ensure that all the data and information processed in Rijkswaterstaat's business processes are secure and controlled IAM Solution Architect (Cloud / Access Management).

Requirements

You have the following background:

• HBO / WO level;
• Knowledge of and experience with IAM implementations for B2E (workforce / extended workforce), B2B or B2C with proven results;
• You have experience with concepts such as Enterprise SSO, Open API, Cloud hosting infrastructure, Privileged Access Management, Identity Governance;
• You know how to interpret and apply policies, frameworks and guidelines (such as BIO, NORA, organizational policies);
• You find challenge in continuous learning and pass on your knowledge so that the knowledge level increases and we as a team are ahead of change in the field of IAM;
• You have experience with the Scrum method and how Agile architecture is applied in a scaled context (e.g. with SAFe). You recognize yourself in the following technical skills:
• Experience with products like Microsoft Azure AD in hybrid setup and Access Management products like for example ForgeRock, Okta or Ping;
• Knowledge and implementation experience with the usual IAM protocols for authentication, authorization, user provisioning and single sign-on, such as OAuth, OpenID Connect, SAML, Bearer Token, Kerberos/NTLM, LDAP authentication, SCIM;
• Knowledge of (Azure) Active Directory, including understanding AD forest, trusts, GPO, etc.;
• Knowledge of IAM related technologies such as (Virtual) Directory Service, Azure Platform (Hosting, AAD, etc.), federations, multi-factor authentication, PIM;
• Knowledge of integrations and commonly used application interfaces such as REST APIs, Web Services, JSON;
• Knowledge of user management / SSO modules in enterprise / cloud applications (e.g. FlexNetManager, Jira, TopDesk, Facilitor, SAP, etc.) is a plus.

Your personality:

• You are a team player who plays a constructive and decisive role
• You speak and write fluent Dutch and English
• You understand that the customer comes first and act accordingly
• You are flexible regarding tasks and assignments but prioritize well
• You like a new challenge and feel comfortable in an environment that offers many different challenges