IAM & Directory Services Security Architect

About the Project We are looking for a visionary Senior/Enterprise IAM Architect to join project from logistics industry . You will become part of Identity and Access Management Team. Following a major organizational integration, your primary mission will be to thoroughly evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture. Rather than deploying new tools, you will focus on bringing expert methodology, architectural alignment, and long-term governance to an already well-equipped environment. Work Mode: 100% Remote (Candidate must be based in Europe); sporadic travel to Hamburg for strategy workshops and team alignment Start Date: ASAP Duration: Long-term, multi-month engagement Job Responsibilities Security Assessment & Remediation: Conduct deep-dive architectural reviews of Active Directory and Microsoft Entra ID environments to identify legacy risks, structural gaps, and configuration baselines Framework & Governance Building: Design, implement, and maintain enterprise-wide IAM/PAM governance frameworks, security standards, and reference architecture blueprints Policy Definition: Establish modern identity control requirements, including advanced authentication (MFA, passwordless, Conditional Access) and privileged access standards (PAM, admin tiering, just-in-time access) Architectural Guidance: Author clear conceptual documentation, decision records, and technical diagrams to guide engineering and delivery teams Stakeholder Advisory: Act as a trusted security advisor, leading workshops and effectively communicating complex architectural risks and strategic roadmaps to both technical teams and business leadership Expectations 10+ years of experience in Identity & Access Management (IAM) or Enterprise Security Architecture within complex, international environments Deep expertise in Directory Services Security : You must possess expert-level knowledge of Active Directory (forests/trusts, Group Policy, authentication mechanisms) and Microsoft Entra ID (Azure AD) Protocols & Standards: Solid understanding of LDAP/LDAPS, Kerberos, SAML, OAuth 2.0, and OpenID Connect Regulatory Awareness: Familiarity with translating security regulations and standards (e.g., ISO 27001, NIS2, GDPR) into practical, implementable technical policies Communication: Fluency in English (written and spoken) with the ability to drive organizational change and persuade diverse stakeholders Nice to have Hands-on familiarity with enterprise-class PAM/IGA solutions (especially CyberArk, which is already fully deployed in the environment) Solid understanding of the broader Microsoft Security Stack Recognized industry certifications : CISSP, CISM, TOGAF, SABSA, or Microsoft specific security certs (SC-100, SC-300, AZ-500) Language skills in German We offer Ongoing support from a dedicated agent , taking care of your project continuity, client contact, necessary formalities, work comfort and development Consultant Development Program – advice on growth planning based on the latest trends and market needs in IT, including consultations with agents and growth mentors Access to 7N Learning & Development – a development and educational platform with webinars, a library of articles and industry reports, and regular invitations to one-time and recurring development events – technical, business, and lifestyle Spectacular integration events , both for you (e.g., annual Kick-Off trip , Christmas parties, or Summer Olympics sports events) and for your loved ones (e.g., family picnics, movie premieres) Professional development not only during the project – you can get involved in knowledge transfer to others within the 7N Services offering directed at 7N clients Relationships and access to the knowledge of the most experienced IT experts in the market – the average professional tenure of our consultants in Poland is over 10 years A complete benefits package , including funding for medical care, life insurance, sports cards for you and your loved ones, as well as discounts in stores in Poland and abroad