- Company Name
- Heathrow
- Job Title
- Lead Architect, Cyber Identity and Directory services
- Job Description
-
**Job Title:** Lead Architect, Cyber Identity and Directory Services
**Role Summary:**
Lead end‑to‑end architecture and strategy for enterprise identity and directory services. Own the roadmap and secure governance of Microsoft AD, Entra ID, Entra Connect, and related tools. Drive design, implementation, and optimization of IDAM while ensuring compliance with regulations and industry best practices. Mentor a small cyber team and collaborate with stakeholders to align security architecture with business priorities.
**Expectations:**
- Champion secure, scalable, and cost‑effective identity solutions across the organization.
- Maintain mainstream vendor support for directory products and manage their lifecycle.
- Provide technical leadership, project oversight, and incident response support.
- Influence security strategy, keeping abreast of emerging threats, technologies, and regulatory changes.
**Key Responsibilities:**
- Design, implement, and refine IDAM solutions using robust security controls (SSO, MFA, PAM, Conditional Access).
- Own the technical direction of Active Directory, AD Certificate Services, AD‑Integrated DNS, Entra ID, and Entra Connect.
- Conduct architecture reviews and guide projects, ensuring adherence to organizational priorities and compliance standards.
- Lead and mentor a team of two cyber specialists, fostering professional growth and knowledge sharing.
- Manage the security roadmap for all directory services, ensure timely vendor support and upgrades.
- Oversee audit preparation, regulatory compliance, and security governance of directory services.
- Support incident response and post‑incident analysis, driving continuous improvement in security posture.
- Engage stakeholders across enterprise functions to prioritize investments and secure enterprise identity initiatives.
- Stay ahead of emerging technologies and threats, recommending strategy adjustments and roadmap updates.
**Required Skills:**
- Deep expertise in Microsoft Active Directory, Entra ID, Entra Connect, Windows Server, and related infrastructure.
- Hands‑on experience with SSO, MFA, PAM, Conditional Access, automation (PowerShell, scripting).
- Strong knowledge of Zero Trust concepts, NIST, ISO 27001, CAF, and Windows hardening practices.
- Proven experience designing and implementing enterprise‑level IDAM solutions.
- Demonstrated leadership and stakeholder engagement in complex security environments.
- Excellent problem‑solving, communication, and team‑management skills.
**Required Education & Certifications:**
- Bachelor’s degree (or higher) in Computer Science, Information Security, or related field.
- Relevant certifications highly desirable: CISSP, CISM, MCSE, CIAMP, or equivalent security architecture credentials.