Logo van Rabobank
Logo van Rabobank

Architect -IAM - Identity Provider (On-Premise & Cloud)

Van Baerlestraat 102-106, 1071 BC Amsterdam, Nederland

Sluit over 2 dagen

Begindatum:

Z.S.M.

Einddatum:

31 dec 2027

Uren per week:

36

Publicatiedatum:

11 nov 2026
Opdracht tarief Geen maximumOpdracht uren 36
Opdracht alleen mogelijk voor professionals in loondienst
Kijkende naar de inhoud van deze opdracht en de wet DBA, kan je deze opdracht alleen uitvoeren als je in loondienst bent. Je kunt ervoor kiezen om bij ons in loondienst te gaan om deze opdracht uit te voeren of via een extern advies- of detacheringsbureau (met akkoord van jouw huidige werkgever). Wij maken voor de betaling van facturen van advies- en detacheringsbureaus gebruik van een G-rekening.
Wil je voor de duur van deze opdracht bij ons in dienst komen?
Dat is mogelijk! Wij bieden je een uitzendovereenkomst aan, waardoor je de opdracht in loondienst vanuit ons uitzendbureau Projectversterkers B.V. kunt uitvoeren. Bereken hieronder jouw bruto maandsalaris.
Wat zijn de voordelen?
Opdracht alleen mogelijk voor professionals in loondienst

Omschrijving

Job Description:

As Solution Architect for the IAM Identity Provider domain, you are responsible for shaping and driving the architecture of the bank's identity services landscape. You design solutions that align with the strategic direction of the IAM Tribe, enterprise architecture principles, and the bank's long-term technology vision.

You provide architectural leadership to DevOps squads and stakeholders by translating strategic objectives into actionable solution designs. Through guidance, inspiration, and technical expertise, you help teams make sound technology decisions while ensuring alignment across products, platforms, and squads.

Your Role:

You are a recognized technical expert with deep knowledge of Identity and Access Management (IAM) and extensive experience with Identity Provider (IdP) technologies such as Microsoft Entra ID and Active Directory. You have a strong understanding of related domains including federation, authentication protocols, Public Key Infrastructure (PKI), Multi-Factor Authentication (MFA), disaster recovery, resiliency, and identity security.

You effectively bridge the gap between Enterprise Architecture and DevOps engineering teams, translating strategic architecture into practical implementation guidance. You engage confidently with engineers, architects, product managers, IT leads, and senior stakeholders, providing technical leadership and architectural direction across multiple squads.

You continuously monitor developments in the identity and security landscape and understand how emerging technologies can contribute to the bank's strategic objectives. While driving innovation and modernization, you maintain a security-first mindset and ensure compliance with enterprise standards, regulatory requirements, and risk frameworks.

As a Solution Architect, you participate in the IAM Architecture Board, where architectural standards, roadmaps, and strategic direction are defined. You are also part of the squad steering triangle, working closely with Product Managers and IT Leads to steer the delivery and evolution of IAM capabilities.

Main Responsibilities:

  • Define and maintain solution architectures that align with enterprise architecture principles, security standards, and the IAM strategy;
  • Guide and support DevOps squads during implementation, ensuring architectural integrity from design through delivery;
  • Provide architectural leadership within the steering triangle and act as the primary technical advisor for the squads you support;
  • Contribute to architectural roadmaps and target-state designs for the Identity Provider landscape, spanning on-premises, hybrid, and cloud environments;
  • Participate in the IAM Architecture Board and represent the interests and strategic direction of the department;
  • Drive architecture decision-making by assessing alternative scenarios, evaluating trade-offs, and providing clear architectural recommendations;
  • Inspire, mentor, and coach DevOps engineers and technical specialists to continuously improve engineering quality and architectural maturity;
  • Promote standardization, simplification, resiliency, and security across IAM platforms and services;
  • Identify opportunities for modernization and support the bank's transformation towards future-state identity solutions;

Eisen

  • Proven experience as a Solution Architect within large-scale enterprise environments;
  • Deep understanding of Identity and Access Management concepts, identity lifecycle management, authentication, authorization, and federation;
  • Strong expertise in Microsoft Entra ID, Active Directory, Federation and hybrid identity architectures;
  • Demonstrated experience defining target architectures, architectural roadmaps, reference architectures, and solution designs aligned with strategic and security objectives;
  • Ability to provide technical leadership and architectural guidance across multiple DevOps squads;
  • Experience operating in highly regulated environments where security, compliance, resilience, risk management, and auditability are critical;
  • Strong analytical skills with the ability to evaluate complex scenarios, balance trade-offs, and make architecture decisions based on business and technical considerations;
  • Excellent communication and stakeholder management skills, with the ability to engage effectively at all levels of the organization;
  • Proven ability to influence without direct authority and align diverse stakeholder groups around a common architectural direction;
  • Experience with disaster recovery, business continuity, PKI, MFA, Zero Trust, and cloud security principles;
  • Familiarity with architecture frameworks such as TOGAF is considered an advantage;

Wensen en competenties

Wensen

  • Experience with large-scale identity transformations and cloud migration initiatives;
  • Knowledge of modern authentication standards and protocols such as OAuth 2.0, OpenID Connect, SAML, and FIDO2;
  • Understanding of Zero Trust architecture principles and identity-centric security models;
  • Relevant certifications such as TOGAF, Microsoft Azure Solutions Architect Expert, Microsoft Identity and Access Administrator, or equivalent;

Organisatie en team

For Rabobank in Utrecht we are looking for a Solution Architect IAM - Identity Provider (On-Premise & Cloud).

Why this role matters

Identity is at the core of the bank's security and digital transformation strategy. As Solution Architect for the Identity Provider domain, you will play a key role in shaping the future identity landscape, guiding critical architectural decisions, and enabling secure, scalable, and resilient identity services for the entire organization.

Overige informatie

Benodigd aantal professionals: 1 FTE
Hybride werken: Ja

Optie tot verlenging: Optie tot verlengen: Nee

Hybride: Hybrid working applies according to the Rabobank @anywhere principle;

Overig algemeen:

• English mandatory;
• Please provide a personal motivation explaining how the candidate meets the requested competencies.
• Due to increasing pressure on the Rabobank location at Croeselaan in Utrecht, a new parking policy has been introduced. From Monday through Thursday, external employees can no longer park on site. Parking remains available on Fridays only;
• Suppliers are expected to be aware of applicable employment legislation and the Rabobank collective labour agreement (CAO). This assignment falls within scale 10 of the Rabobank CAO;
• We would like to receive the personal motivation and CV in English;
• A candidate may only be submitted to one Rabobank request at a time. During the exclusivity period (4 working days), the candidate may only be submitted to de administratieve partner;
• It is important that the candidate is available for the full duration of the assignment;
• Pre-employment screening applies. Candidates may only start after successfully completing the screening process;
• The candidate must possess a valid passport or identity card, which must be valid at intake and on the contract start date;



Meer informatie
Hieronder vind je meer informatie over het aanmeldproces en antwoorden op veelgestelde vragen. Niet gevonden wat je zoekt? Neem dan contact op met Sybren Hindriks via sybren.hindriks@kbenp.nl.
Contact
Hoe werkt het?
Veelgestelde vragen
Wil je even sparren met een van onze adviseurs?
Neem contact op met onze opdracht adviseur over de opdracht. Je kunt natuurlijk ook contact opnemen via de contactpagina.
Opdracht Adviseur Sybren Hindriks
Sybren Hindriks
Opdracht Adviseur
Afwezig
Werkdagen: di, wo, do, vr