Architect

For Rabobank in Utrecht we are looking for a Solution Architect IAM - Identity Provider (On-Premise & Cloud).

Details:
• 1 FTE;
• 36 hours per week;
• English mandatory;
• Not suitable for ZZP;
• Suppliers may submit a maximum of 2 candidates. If multiple candidates are submitted by the same supplier, all candidates will be rejected;
• Please clearly indicate in the motivation field whether the candidate has any planned vacation and/or special leave during the duration of the assignment;
• Please clearly state in the CV whether an internal reference may be requested. If the candidate is currently working, or has recently worked, within Rabobank, please provide the name and job title of the relevant team lead;

Solution Architect IAM - Identity Provider (On-Premise & Cloud)

Job Description:

As Solution Architect for the IAM Identity Provider domain, you are responsible for shaping and driving the architecture of the bank's identity services landscape. You design solutions that align with the strategic direction of the IAM Tribe, enterprise architecture principles, and the bank's long-term technology vision.

You provide architectural leadership to DevOps squads and stakeholders by translating strategic objectives into actionable solution designs. Through guidance, inspiration, and technical expertise, you help teams make sound technology decisions while ensuring alignment across products, platforms, and squads.

Your Role:

You are a recognized technical expert with deep knowledge of Identity and Access Management (IAM) and extensive experience with Identity Provider (IdP) technologies such as Microsoft Entra ID and Active Directory. You have a strong understanding of related domains including federation, authentication protocols, Public Key Infrastructure (PKI), Multi-Factor Authentication (MFA), disaster recovery, resiliency, and identity security.

You effectively bridge the gap between Enterprise Architecture and DevOps engineering teams, translating strategic architecture into practical implementation guidance. You engage confidently with engineers, architects, product managers, IT leads, and senior stakeholders, providing technical leadership and architectural direction across multiple squads.

You continuously monitor developments in the identity and security landscape and understand how emerging technologies can contribute to the bank's strategic objectives. While driving innovation and modernization, you maintain a security-first mindset and ensure compliance with enterprise standards, regulatory requirements, and risk frameworks.

As a Solution Architect, you participate in the IAM Architecture Board, where architectural standards, roadmaps, and strategic direction are defined. You are also part of the squad steering triangle, working closely with Product Managers and IT Leads to steer the delivery and evolution of IAM capabilities.

Main Responsibilities:

• Define and maintain solution architectures that align with enterprise architecture principles, security standards, and the IAM strategy;
• Guide and support DevOps squads during implementation, ensuring architectural integrity from design through delivery;
• Provide architectural leadership within the steering triangle and act as the primary technical advisor for the squads you support;
• Contribute to architectural roadmaps and target-state designs for the Identity Provider landscape, spanning on-premises, hybrid, and cloud environments;
• Participate in the IAM Architecture Board and represent the interests and strategic direction of the department;
• Drive architecture decision-making by assessing alternative scenarios, evaluating trade-offs, and providing clear architectural recommendations;
• Inspire, mentor, and coach DevOps engineers and technical specialists to continuously improve engineering quality and architectural maturity;
• Promote standardization, simplification, resiliency, and security across IAM platforms and services;
• Identify opportunities for modernization and support the bank's transformation towards future-state identity solutions;

Your Profile:

• Proven experience as a Solution Architect within large-scale enterprise environments;
• Deep understanding of Identity and Access Management concepts, identity lifecycle management, authentication, authorization, and federation;
• Strong expertise in Microsoft Entra ID, Active Directory, Federation and hybrid identity architectures;
• Demonstrated experience defining target architectures, architectural roadmaps, reference architectures, and solution designs aligned with strategic and security objectives;
• Ability to provide technical leadership and architectural guidance across multiple DevOps squads;
• Experience operating in highly regulated environments where security, compliance, resilience, risk management, and auditability are critical;
• Strong analytical skills with the ability to evaluate complex scenarios, balance trade-offs, and make architecture decisions based on business and technical considerations;
• Excellent communication and stakeholder management skills, with the ability to engage effectively at all levels of the organization;
• Proven ability to influence without direct authority and align diverse stakeholder groups around a common architectural direction;
• Experience with disaster recovery, business continuity, PKI, MFA, Zero Trust, and cloud security principles;
• Familiarity with architecture frameworks such as TOGAF is considered an advantage;

Preferred Qualification:

• Experience with large-scale identity transformations and cloud migration initiatives;
• Knowledge of modern authentication standards and protocols such as OAuth 2.0, OpenID Connect, SAML, and FIDO2;
• Understanding of Zero Trust architecture principles and identity-centric security models;
• Relevant certifications such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent;

Why this role matters

Identity is at the core of the bank's security and digital transformation strategy. As Solution Architect for the Identity Provider domain, you will play a key role in shaping the future identity landscape, guiding critical architectural decisions, and enabling secure, scalable, and resilient identity services for the entire organization.

Please provide a personal motivation explaining how the candidate meets the requested competencies.

Additional information:
• Hybrid working applies according to the Rabobank @anywhere principle;
• Due to increasing pressure on the Rabobank location at Croeselaan in Utrecht, a new parking policy has been introduced. From Monday through Thursday, external employees can no longer park on site. Parking remains available on Fridays only;
• Please note: payroll-midlance constructions are not permitted under Rabobank policy. Do not submit candidates through this construction. Compliance checks may take place during screening;
• Suppliers are expected to be aware of applicable employment legislation and the Rabobank collective labour agreement (CAO). This assignment falls within scale 10 of the Rabobank CAO;
• We would like to receive the personal motivation and CV in English;
• A candidate may only be submitted to one Rabobank request at a time. During the exclusivity period (4 working days), the candidate may only be submitted to Magnit - Rabobank;
• It is important that the candidate is available for the full duration of the assignment;
• Pre-employment screening applies. Candidates may only start after successfully completing the screening process;
• The candidate must possess a valid passport or identity card, which must be valid at intake and on the contract start date;
• For indirect freelancers, the contract will be processed through a fee-only agreement. This agreement can be requested in advance;
• By submitting a candidate, you confirm acceptance of the conditions applicable to this client. If you are not familiar with these conditions, please contact the responsible recruiter.

IMPORTANT:
Please complete all candidate details correctly. For email address, phone number and residential address, use the candidate's own details. These details are required by the client as part of the submission. Incomplete or incorrect submissions will be rejected.