Functie
Solution Architect IAM – Identity Provider (On-Premise & Cloud)
Location: Utrecht
Working hours: 36 hours per week
Working arrangement: Hybrid
Language: English is required
About the role
As Solution Architect for the IAM Identity Provider domain, you will shape the architecture of identity services across on-premises, hybrid and cloud environments. You will translate strategic objectives into practical solution designs and provide architectural leadership to DevOps squads and stakeholders.
You will help teams make sound technology decisions while maintaining alignment across products, platforms and squads. You will bring a security-first mindset to innovation and modernization, ensuring that solutions meet enterprise standards, regulatory requirements and risk frameworks.
Key responsibilities
Define and maintain solution architectures aligned with enterprise architecture principles, security standards and IAM strategy.
Guide DevOps squads through implementation and maintain architectural integrity from design to delivery.
Provide technical leadership and advice to the squads you support.
Develop architectural roadmaps and target-state designs for the Identity Provider landscape across on-premises, hybrid and cloud environments.
Assess alternative scenarios, evaluate trade-offs and provide clear architectural recommendations.
Coach and mentor engineers and technical specialists to strengthen engineering quality and architectural maturity.
Promote standardization, simplification, resilience and security across IAM platforms and services.
Identify opportunities to modernize identity solutions.
Your profile
Proven experience as a Solution Architect in large-scale enterprise environments.
Deep knowledge of IAM, including identity lifecycle management, authentication, authorization and federation.
Strong expertise in Microsoft Entra ID, Active Directory, federation and hybrid identity architectures.
Experience defining target architectures, roadmaps, reference architectures and solution designs aligned with strategic and security objectives.
Ability to provide architectural guidance across multiple DevOps squads.
Experience in highly regulated environments where security, compliance, resilience, risk management and auditability are critical.
Strong analytical skills and the ability to balance business and technical considerations when making architecture decisions.
Excellent communication and stakeholder management skills, with the ability to influence without direct authority.
Experience with disaster recovery, business continuity, PKI, MFA, Zero Trust and cloud security principles.
Preferred qualifications
Experience with large-scale identity transformations and cloud migration initiatives.
Knowledge of modern authentication standards and protocols, such as OAuth 2.0, OpenID Connect, SAML and FIDO2.
Familiarity with architecture frameworks such as TOGAF.
Relevant certifications, such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent.
Eisen
- English is mandatory
- Candidates must be available for the full duration of the assignment
- Candidates may only start after successfully completing the pre-employment screening process
- The candidate must possess a valid passport or identity card, valid both at intake and on the contract start date
- Payroll-midlance constructions are not permitted
- Candidate may only be submitted to one Rabobank request at a time and, during the four-working-day exclusivity period, may only be submitted to Magnit - Rabobank
- The personal motivation and CV must be provided in English
- The candidate must have proven experience as a Solution Architect within large-scale enterprise environments
- The candidate must have a deep understanding of Identity and Access Management concepts, identity lifecycle management, authentication, authorization, and federation
- The candidate must have strong expertise in Microsoft Entra ID, Active Directory, federation, and hybrid identity architectures
- The candidate must have demonstrated experience defining target architectures, architectural roadmaps, reference architectures, and solution designs aligned with strategic and security objectives
- The candidate must be able to provide technical leadership and architectural guidance across multiple DevOps squads
- The candidate must have experience operating in highly regulated environments where security, compliance, resilience, risk management, and auditability are critical
- The candidate must have strong analytical skills and be able to evaluate complex scenarios, balance trade-offs, and make architecture decisions based on business and technical considerations
- The candidate must have excellent communication and stakeholder management skills and be able to engage effectively at all levels of the organization
- The candidate must be able to influence without direct authority and align diverse stakeholder groups around a common architectural direction
- The candidate must have experience with disaster recovery, business continuity, PKI, MFA, Zero Trust, and cloud security principles
Gunningscriteria
- Familiarity with architecture frameworks such as TOGAF is considered an advantage
- Experience with large-scale identity transformations and cloud migration initiatives is preferred
- Knowledge of modern authentication standards and protocols such as OAuth 2.0, Open
- ID Connect, SAML, and FIDO2 is preferred
- Understanding of Zero Trust architecture principles and identity-centric security models is preferred
- Relevant certifications such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent are preferred
Extra informatie
Je sollicitatie dient uiterlijk 13 november 2026 om 10:00 uur door ons te zijn ingediend, voorzien van een motivatie (waarin wordt toegelicht hoe aan de eisen en gunningscriteria wordt voldaan) en twee referenties. Wij ontvangen je gegevens graag minimaal één werkdag vóór de sluitingsdatum.
