1 Identity Solution Architect

This Tender is invited by the Issuer. Overview The Department of Finance (Buyer) is seeking one Identity Solution Architect to lead architecture and design for the Identity and Access Management Modernisation (IAMM) Project. About The IAMM Project will modernise Finance's identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance's primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029. The Project supports Finance's ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program. Note: the Secure Access Service Edge (SASE) is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model. Objectives The project will: Establish Microsoft Entra ID as Finance's primary identity directory and modern identity platform Reduce reliance on MIM, AD FS and other legacy identity technologies Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On Improve privileged access, access reviews, entitlement management, group governance, audit and reporting Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance's broader move towards cloud services and Zero Trust architecture The Role This Canberra-based role will translate business, security and operational requirements into current-state, transition-state and target-state identity architectures centred on Microsoft Entra ID. The architect will address dependencies across AD FS, MIM, SAP HR, Content Manager, applications, endpoints, remote access and managed services, and provide architecture assurance throughout delivery. The role is responsible for delivering: Leading current-state, transition-state and target-state solution architecture Producing high-level and detailed solution designs Defining identity integration, authentication, provisioning and governance patterns Assessing design options, dependencies, constraints and technical risks Leading architecture and design reviews Maintaining traceability between requirements, architecture and detailed designs Providing technical direction to the engineers and delivery team Instructions to Tenderers The Department of Finance will not consider or invite additional sellers to this RFQ. Unsolicited emails and requests will not be answered.