IAM & Directory Services Security Architect

About the Project

We are looking for a visionary Senior/Enterprise IAM Architect to join project from logistics industry. You will become part of Identity and Access Management Team. Following a major organizational integration, your primary mission will be to thoroughly evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture.

Rather than deploying new tools, you will focus on bringing expert methodology, architectural alignment, and long-term governance to an already well-equipped environment.

Work Mode: 100% Remote (Candidate must be based in Europe); sporadic travel to Hamburg for strategy workshops and team alignment

Start Date: ASAP

Duration: Long-term, multi-month engagement

Job Responsibilities

• Security Assessment & Remediation: Conduct deep-dive architectural reviews of Active Directory and Microsoft Entra ID environments to identify legacy risks, structural gaps, and configuration baselines

• Framework & Governance Building: Design, implement, and maintain enterprise-wide IAM/PAM governance frameworks, security standards, and reference architecture blueprints

• Policy Definition: Establish modern identity control requirements, including advanced authentication (MFA, passwordless, Conditional Access) and privileged access standards (PAM, admin tiering, just-in-time access)

• Architectural Guidance: Author clear conceptual documentation, decision records, and technical diagrams to guide engineering and delivery teams

• Stakeholder Advisory: Act as a trusted security advisor, leading workshops and effectively communicating complex architectural risks and strategic roadmaps to both technical teams and business leadership

Expectations

• 10+ years of experience in Identity & Access Management (IAM) or Enterprise Security Architecture within complex, international environments

• Deep expertise in Directory Services Security: You must possess expert-level knowledge of Active Directory (forests/trusts, Group Policy, authentication mechanisms) and Microsoft Entra ID (Azure AD)

• Protocols & Standards: Solid understanding of LDAP/LDAPS, Kerberos, SAML, OAuth 2.0, and OpenID Connect

• Regulatory Awareness: Familiarity with translating security regulations and standards (e.g., ISO 27001, NIS2, GDPR) into practical, implementable technical policies

• Communication: Fluency in English (written and spoken) with the ability to drive organizational change and persuade diverse stakeholders

Nice to have

• Hands-on familiarity with enterprise-class PAM/IGA solutions (especially CyberArk, which is already fully deployed in the environment)

• Solid understanding of the broader Microsoft Security Stack

• Recognized industry certifications: CISSP, CISM, TOGAF, SABSA, or Microsoft specific security certs (SC-100, SC-300, AZ-500)

• Language skills in German

We offer

• Ongoing support from a dedicated agent, taking care of your project continuity, client contact, necessary formalities, work comfort and development

• Consultant Development Program – advice on growth planning based on the latest trends and market needs in IT, including consultations with agents and growth mentors

• Access to 7N Learning & Development – a development and educational platform with webinars, a library of articles and industry reports, and regular invitations to one-time and recurring development events – technical, business, and lifestyle

• Spectacular integration events, both for you (e.g., annual Kick-Off trip, Christmas parties, or Summer Olympics sports events) and for your loved ones (e.g., family picnics, movie premieres)

• Professional development not only during the project – you can get involved in knowledge transfer to others within the 7N Services offering directed at 7N clients

• Relationships and access to the knowledge of the most experienced IT experts in the market – the average professional tenure of our consultants in Poland is over 10 years

• A complete benefits package, including funding for medical care, life insurance, sports cards for you and your loved ones, as well as discounts in stores in Poland and abroad