8-10 years of experience in integration or solution architecture, specifically in authentication platforms
Proven track record in modernizing identity and access management (IAM) ecosystems
Expertise in OAuth 2.0, OIDC, and SAML 2.0 at a design level
Experience in designing complex integration solutions across distributed systems
Ability to produce architecture documents and migration strategies independently
Strong understanding of security, data protection, and digital access management
Experience working in agile, multidisciplinary environments
Responsibilities
Own the migration of Wealth Management authentication to Auth0/SAMD
Define target architecture and support development teams during implementation
Align GP solutions with corporate identity management foundations
Coordinate multiple projects including Conquest, Mako, Hybrid Offer, and Unique Identifier
Produce architecture decision records, impact analyses, and integration mapping
Develop client migration and decommissioning strategies
Advise delivery, security, and enterprise architecture teams alongside technical design
Benefits
Opportunity to lead significant modernization initiatives in Wealth Management
Engagement with cross-functional teams across business and technology
Exposure to cutting-edge authentication technologies and methodologies
Chance to influence security and identity management strategies
Work in a dynamic, agile environment with diverse project scopes
Full Job Description
Job Description Mandate Overview:
The program is looking for an integration architect who will own the migration of Wealth Management authentication to Auth0/SAMD, from target architecture definition through supporting development teams during implementation. The role is cross-functional: it aligns GP solutions with corporate identity management foundations and coordinates the Conquest, Mako, Hybrid Offer and Unique Identifier projects. Deliverables are concrete and documented: architecture decision records, impact analyses, integration mapping, client migration and decommissioning strategies. The advisory role with delivery, security and enterprise architecture teams carries as much weight as technical design. The experience threshold differs between the title received (8+ years) and the mandate description (10+ years), a point submitted to the client.
Target candidate: a solution or integration architect who has already led the modernization or migration of an authentication platform (Auth0 or another identity federation solution) across multiple applications, with OAuth 2.0, OIDC and SAML 2.0 mastered at design level. They produce the architecture documents and migration strategies themselves, and can bring business, security, development and operations teams to alignment.
Requirements
Required:
Authentication and identity and access management (IAM) ecosystem modernization projects
Integration of modern authentication platforms, such as Auth0 and other identity federation solutions
Protocols and standards: OAuth 2.0, OIDC, SAML 2.0 and SSO
Design and implementation of complex integration solutions in distributed, multi-system environments
Migration strategies and transition of legacy systems to modern architectures
Production of solution architectures, impact analyses, migration strategies and architecture documents
Security, data protection and digital access management issues
Agile, multidisciplinary environments involving multiple delivery teams
Coordination of work across business, architecture, security, development and operations teams
Analysis, problem solving and decision making in complex contexts
Communication, simplification and influential leadership
Preferred:
IAM: Auth0, SAMD, MFA, SSO, identity federation
JWT, certificate and encryption mechanisms (in addition to required protocols)
Development technologies: Java/Spring Boot, .NET/.NET Core, DevOps, Git, Azure DevOps
Azure Cloud, Docker, Kubernetes/OpenShift
Digital modernization environments: authentication, security, integration in complex ecosystems
Asset:
Major asset: Wealth Management environments and Client's digital modernization initiatives
Major asset: Conquest, Mako, SmartD, Market-Q platforms
Financial sector or highly regulated environments
Profiles to Exclude:
Solution architect profile whose IAM experience is limited to consuming an existing SSO, with no authentication platform modernization or migration project.
IAM administrator or operator profile (provisioning, account management, console configuration) with no demonstrated target architecture design responsibility.
Security architect profile focused on compliance, governance or risk management, with no application integration deliverable.
Developer or tech lead profile who integrated OAuth or OIDC into a single application, with no architecture mandate spanning multiple applications or client bases.
Enterprise architect profile focused on mapping and strategy, with no solution architecture document produced for an implementation.
Profile with no demonstrated legacy-to-modern architecture migration project.
