IGA Domain Architect

• Define and maintain the target architecture for IGA services at IKEA with focus on SailPoint, Microsoft Entra ID and supporting components
• Collaborate with business and digital teams to understand identity requirements, compliance needs, and application modernization goals
• Design onboarding and integration patterns for applications to consume IGA services
• Identify ways to automate and simplify onboarding processes using DevOps principles
• Support strategic transformation initiatives by designing identity architecture
• Work with Enterprise Architecture function to ensure alignment with reference architecture and security principles
• Provide architectural guidance to IGA implementation team
• Document current and target states, create transition plans, and support governance activities

• Proven experience designing architectures for IGA platforms (SailPoint, Saviynt, or One Identity)
• Understanding of identity governance principles in large, federated environments with hybrid landscapes
• Skilled at translating business needs and risk requirements into actionable architecture and integration patterns
• Experience working with enterprise architects, engineering teams, and business stakeholders
• Experience in designing for transformation - supporting application modernization, cloud adoption, and system decoupling
• Familiarity with Entra ID (Azure AD), SCIM, role-based access control (RBAC), and attribute-based access control (ABAC)
• Structured, strategic, and passionate about creating scalable identity solutions

Familiarity with Entra ID (Azure AD), SCIM, role-based access control (RBAC), and attribute-based access control (ABAC)