Identity Solution Architect

DEPARTMENT OF FINANCE WILL NOT CONSIDER OR INVITE ADDITIONAL SELLERS TO THIS RFQ. UNSOLICITED EMAILS AND REQUESTS WILL NOT BE ANSWERED. The Department of Finance (Buyer) is seeking one Identity Solution Architect to lead architecture and design for the Identity and Access Management Modernisation (IAMM) Project, responsible for delivering: leading current-state, transition-state and target-state solution architecture; producing high-level and detailed solution designs; defining identity integration, authentication, provisioning and governance patterns; assessing design options, dependencies, constraints and technical risks; leading architecture and design reviews; maintaining traceability between requirements, architecture and detailed designs; providing technical direction to the engineers and delivery team. The IAMM Project will modernise Finance’s identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance’s primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029. The Project supports Finance’s ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program. The project will: Establish Microsoft Entra ID as Finance’s primary identity directory and modern identity platform. Reduce reliance on MIM, AD FS and other legacy identity technologies. Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities. Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes. Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On. Improve privileged access, access reviews, entitlement management, group governance, audit and reporting. Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer. Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance’s broader move towards cloud services and Zero Trust architecture. The Canberra-based role will translate business, security and operational requirements into current-state, transition-state and target-state identity architectures centred on Microsoft Entra ID. The architect will address dependencies across AD FS, MIM, SAP HR, Content Manager, applications, endpoints, remote access and managed services, and provide architecture assurance throughout delivery. Note: SASE is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model. Key duties and responsibilities The successful candidate (as Identity Solution Architect) will undertake the following duties and responsibilities: Lead discovery, architecture and technical design workshops with Finance business, architecture, cyber security, operational and support stakeholders. Assess the current identity architecture, integrations, controls, dependencies, operational processes and technical debt across Entra ID, Active Directory, MIM, AD FS and related identity and access management services (i.e. modern authentication, SSO, provisioning and identity lifecycle management). Develop and maintain current-state, transition-state and target-state architecture for the IAMM program, including identity lifecycle management, authentication, identity governance, SSO, provisioning and privileged access. Produce and maintain architecture artefacts including High Level Designs (HLDs), Detailed Solution Designs (DSDs), architecture diagrams, integration designs, data and attribute mapping specifications, migration designs and architecture decision records. Define the target identity architecture and integration patterns for authoritative sources, Joiner-Mover-Leaver processes, application onboarding, access governance, authentication and identity lifecycle management. Evaluate solution options, identify technical risks, dependencies and constraints, and provide recommendations to Finance governance and architecture review bodies. Provide architecture and technical design assurance throughout solution build, testing, deployment, transition and operational handover. Work with engineers to review and validate detailed designs, configurations and implementation approaches to ensure alignment with the approved architecture. Draft, develop and maintain the IAMM System Security Plan (SSP), documenting system boundaries, architecture, information flows, security controls, control ownership and supporting accreditation evidence. Support development and maintenance of the Security Risk Management Plan (SRMP) and associated security assurance artefacts. Provide technical information and evidence to support IRAP assessments, penetration testing, remediation activities and Authority to Operate (AtO) processes. Ensure architecture, security and design documentation remains aligned with the implemented solution and is updated throughout delivery. Support knowledge transfer, operational readiness and transition of the solution to Finance support teams. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Labour Hire Workers and Supplier Personnel MUST include in their response to the RFQ any potential conflicts of interest which may arise in performing duties during the term of the Contract. This includes (but is not limited to): owning interests and/or ongoing employment with ICT businesses who deliver services to the Commonwealth; have vested interests in ICT technologies; have l relationships with Buyer personnel involved in the Contract’s scope. Response to this question does not count towards a candidate’s word/page limit. Desirable criteria 1. All Candidates with respect to their Seller will be evaluated against the evaluation criterion listed in this “Desirable Criteria” section. The evaluation criteria are unweighted. Evaluation Criterion 1: The extent to which a candidate & seller demonstrates an understanding and appreciation of the Requirements (Role description + Key duties and responsibilities + Technical Skills). 2. Evaluation Criterion 2: The extent to which a candidate & seller demonstrates the capacity, capability, and experience to fulfil the Requirements (Role description + Key duties and responsibilities + Technical Skills) to a high standard and within any specified timeframes. • The Buyer will consider potential onboarding delays and impacts to timeframes if candidates does not possess a current security clearance. • The Buyer will consider non-compliance with details of the Working Arrangement. 3. Evaluation Criterion 3: The risk associated with a candidate and/or seller. Including (but not limited to) those identified during interviews; referee reports; non-compliance with contract terms and conditions; financial viability risks; conflicts of interest; and any other due diligence checks considered by the Buyer. 4. Evaluation Criterion 4: The pricing and whole-of-life costs associated with a candidate and/or seller. Opportunity summary Sellers can submit Up to 3 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia