IAM Architect Active Directory Entra ID

Shape Active Directory and Microsoft Entra ID architecture at Kinross, guiding identity governance and hybrid-cloud security across the enterprise.

This IAM Architect owns target-state identity architecture, standards, and the multi-year roadmap within Enterprise Cyber. The role combines strategic judgment with hands-on expertise in directory services, authentication protocols, identity governance, and automation. You will guide IAM engineers and collaborate with HR, application owners, audit, security, infrastructure, DevOps, and vendors.

Key Responsibilities:

• Own enterprise IAM architecture, standards, and multi-year roadmap
• Modernize Active Directory and design hybrid identity architecture
• Define Entra ID authentication, Conditional Access, and privileged access strategies
• Architect Saviynt lifecycle, governance, and integration capabilities
• Mentor engineers and govern architecture decisions, exceptions, and controls

Requirements:

• 10+ years in identity and access management
• Deep Active Directory and Microsoft Entra ID expertise
• Enterprise IGA architecture experience, preferably with Saviynt
• Advanced PowerShell, Microsoft Graph API, and automation knowledge
• Bachelor’s degree or equivalent experience; relevant certifications preferred

Apply architectural judgment, identity governance, and hybrid Microsoft expertise to strengthen Kinross’s secure enterprise identity ecosystem.