Lead Consultant

Lead Identity Consultant

Seniority: Senior / Architect-level (Design Authority)

Experience: Minimum 15 years specialising in enterprise identity, with broader Microsoft cloud experience.

The Lead Identity Consultant provides strategic and technical leadership across enterprise identity architecture, spanning hybrid identity, identity governance, and cross-tenant and M&A scenarios. The role bridges deep technical design and delivery with client and stakeholder advisory, ensuring identity solutions are secure, resilient, and aligned to broader enterprise cloud and security strategy.

“a great place to work, a great place to be a customer”

Key Responsibilities:

• Lead design and delivery of Entra ID architecture, including hybrid identity (Entra Connect Sync, Cloud Sync), identity governance, and lifecycle workflows.
• Lead design and delivery of large-scale M&A consolidation projects.
• Proficient with modern protocols such as Kerberos, SCIM, OIDC, SAML and in-depth knowledge of token assurance and authorisation mechanics
• Architect cross-tenant and multi-tenant designs (MTO/CTS) for M&A, divestiture, and organisational restructuring scenarios.
• Define and implement Privileged Identity Management (PIM), Conditional Access, and least-privilege access models.
• Design governance frameworks for non-human and agentic identities, extending identity security practices beyond traditional user/device scope.
• Lead migration and cutover of complex identity transitions (e.g. MIM, Entra Connect to Cloud Sync) including multiple forests/tenants.
• Produce client-ready design authority documentation: architecture decisions, risk assessments, and runbooks.
• Lead and design configuration-as-code solutions for Entra/M365.
• Advise on identity aspects of security and compliance frameworks (CAF, Well-Architected Framework, Zero Trust).
• Collaborate with security, infrastructure, and application teams to align identity architecture with wider platform design.
• Mentor consultants and review technical documentation and design artefacts.

Key Skills & Experience:

• 15+ years in enterprise-scale identity architecture, ideally across multi-forest, multi-tenant, or regulated environments.

Deep understanding of:

• Entra ID architecture and hybrid identity (Entra Connect Sync, Cloud Sync, AD).
• Identity governance and lifecycle management (PIM, entitlement management, access reviews.)
• Cross-tenant and multi-tenant design for M&A and organisational change.
• Complex Active Directory designs and remediation scoping and actioning via structured planning methodology
• General Active Directory health, hardening, and remediation for enterprise-level clients.
• Non-human and agentic identity security and governance design and implementation.
• Inter/intra-forest consolidation.
• Microsoft 365 identity integration.
• Project management experience, including waterfall /Agile delivery methodologies and project delivery governance.
• Automation experience (PowerShell, Microsoft Graph) for identity operations, configuration-as-code, and migration tooling.
• Experience leading identity workstreams within larger cloud transformation or migration programmes.
• Strong documentation, stakeholder communication, and design authority experience.
• Relevant certifications (e.g. SC-300, SC-100, AZ-104) desirable.
• Okta, Ping or other identity management solutions desirable.
• Familiarity of enterprise PKI design and deployment.

Why join Chess?

Chess is one of the UK's leading independent and trusted technology service providers, employing over 280 skilled people across the UK, supporting over 18,000 UK businesses.

Diversity, equality, and inclusion is at the heart of our Chess culture, and we are passionate about our One Team spirit.

We're extremely proud that our people voted us No.1 in 'The 100 Best Companies to Work for' list 2018, and we continue to celebrate more than 17 years in the top 100.

Our continued focus on growth creates opportunity for everyone to progress their career, to develop knowledge and skills, to gain reward and recognition and to maximise their potential. The growth and success of our people ensures the growth and success of our business.

We believe that “if you’re not growing, we’re not growing”.

Salary details: Competitive salary based on experience plus bonus based on chargeability.

Your Benefits at Chess:

We care about your health, wellbeing, and career. Here’s what you’ll enjoy:

• Private healthcare (free after 1 year)
• Eye tests, flu jabs, and on-site health checks
• Mental health support from trained First Aiders
• Flexible working support with a home office allowance
• 25 days holiday plus bank holidays
• Buy or sell up to 5 holidays twice a year
• Perkbox discounts on shopping, travel, fitness, and more
• Points-based rewards from year 2
• Charity donation matching (up to £100)
• Recognition platform to celebrate your wins
• EE SIM offers for you and your family
• £1000 referral bonuses
• Learn 2 Earn scheme to boost your salary
• Team socials and celebrations
• Bespoke onboarding and leadership training
• Dedicated Culture Team to support you

Working Hours & Location:

A standard week is 37.5 hours, Monday to Friday.

This is a flexible, hybrid position with a home-first policy.

Allowing you to enjoy the flexibility of working from home whilst also having the option to work from one of our many local hubs spread throughout the UK. Ad-hoc travel to offices within the group and other locations may be required on occasion.

Interview Process:

As part of our hiring process, you may expect a face‐to‐face interview at one of our hubs. We understand that choosing the right opportunity is an important decision—and it works both ways.

This will give you the chance to meet the wider team and get a real feel for the Chess culture and day‐to‐day environment, helping you decide whether we’re the right fit for you as much as you are for us.

Is Chess the place for you?

If you are looking for a career that brings exciting challenges and opportunities, then Chess is the place for you.

Please email your CV and covering letter to our Recruitment Department at: careers@chessict.co.uk.

Upon submission of your completed application to Chess, either through direct application or speculative, you hereby agree to the processing of your personal information as per the guidelines set out within our Privacy Policy and to allow for the seamless and secure processing of your information throughout Chess’s recruitment and hiring practices.

Equal Opportunities Statement

At Chess ICT, we value diversity and are committed to creating an inclusive workforce. We want to make sure everyone has a fair chance and opportunity throughout the application process. If you require any adjustments during your application or interview, please feel comfortable reaching out to our recruitment team so we can support you.