Primary PurposeThe IGA Domain and Solution Architect is responsible for defining, governing, and evolving enterprise Identity Governance & Administration (IGA) architecture across Ahold Delhaize. This role provides strategic architectural leadership for identity lifecycle management, access governance, role management, authentication, authorization, and identity integrations while ensuring alignment with business objectives, security requirements, and enterprise architecture standards.
Working closely with business leaders, security teams, product owners, engineers, and enterprise architects, the role serves as a trusted advisor for IAM strategy, roadmap development, and large-scale solution delivery. The architect balances innovation, security, operational efficiency, and business value to deliver scalable and sustainable identity solutions.
Duties and ResponsibilitiesStrategy, Governance, and Roadmap- Define and maintain the IGA target-state architecture and roadmap aligned with enterprise architecture principles and business objectives.
- Translate technology strategy into scalable IAM governance models, standards, policies, and operating procedures.
- Partner with business and technology leaders to align identity initiatives with strategic priorities and investment decisions.
- Evaluate emerging technologies, industry trends, and market capabilities to identify opportunities for modernization and innovation.
- Drive architecture planning across multiple technology domains and large-scale programs.
Domain and Solution Architecture- Design enterprise-scale Identity Governance & Administration solutions supporting identity lifecycle management, access governance, provisioning, and role management.
- Define architectures supporting Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), authentication, authorization, and compliance requirements.
- Develop architecture deliverables including reference architectures, high-level solution designs, Project State Architecture (PSA) documents, and technology standards.
- Ensure solutions are secure-by-design, compliant-by-design, scalable, resilient, and aligned with approved architectural standards.
- Provide architectural oversight throughout the solution lifecycle from concept through implementation and deployment.
Delivery Leadership- Serve as the lead architect for large and complex IAM and IGA initiatives.
- Provide technical leadership and guidance to Product Owners, Solution Architects, Engineers, and Delivery Teams.
- Ensure architecture standards, design principles, and governance requirements are consistently applied across initiatives.
- Review and approve solution designs, ensuring alignment with enterprise architecture and security requirements.
- Act as a subject matter expert for Identity Governance & Administration capabilities and best practices.
Operational and Support Responsibilities- Serve as an escalation point for complex identity and access management challenges.
- Support incident investigations, impact assessments, root cause analysis, and remediation planning.
- Collaborate with operational teams to address recurring issues and improve platform stability, scalability, and performance.
- Support internal and external audits by providing architectural documentation and design rationale.
- Evaluate design deviations and technical debt and recommend remediation strategies.
- Participate in Manager on Duty (MoD) responsibilities as required.
QualificationsRequired Qualifications- Bachelor's degree in Information Technology, Computer Science, Cyber Security, Engineering, Business Information Systems, or a related field.
- Minimum of 8 years of progressive experience in Identity and Access Management (IAM), Identity Governance & Administration (IGA), Cyber Security Architecture, or Enterprise Architecture.
- Proven experience designing and implementing enterprise IAM and IGA architectures within large, complex organizations.
- Experience developing architecture roadmaps, target-state architectures, and governance frameworks.
- Strong knowledge of identity lifecycle management, user provisioning, access management, and governance processes.
- Demonstrated expertise in RBAC, ABAC, authentication, authorization, and access governance models.
- Experience creating and maintaining architecture artifacts including reference architectures, standards, and solution design documentation.
- Strong stakeholder management, communication, and influencing skills.
- Ability to advise senior business and technology leaders on strategic architecture decisions.
- Experience leading large and complex technology initiatives from architecture through delivery.
Preferred Qualifications- Master's degree in Information Technology, Computer Science, Cyber Security, Business Administration, or a related discipline.
- Industry certifications such as TOGAF, CISSP, SABSA, or leading IAM/IGA platform certifications.
- Experience with enterprise-scale Identity Governance platforms and cloud-based identity architectures.
- Experience establishing architecture standards, governance processes, and technology roadmaps.
- Demonstrated success delivering complex transformation initiatives across multiple technology domains.
- Experience mentoring architects and serving as a functional leader within an architecture community of practice.
