Senior Integration Solution Architect (ASI)

Mandate Overview:

• The program is looking for an integration architect who will own the migration of Wealth Management authentication to Auth0/SAMD, from target architecture definition through supporting development teams during implementation. The role is cross-functional: it aligns GP solutions with corporate identity management foundations and coordinates the Conquest, Mako, Hybrid Offer and Unique Identifier projects. Deliverables are concrete and documented: architecture decision records, impact analyses, integration mapping, client migration and decommissioning strategies. The advisory role with delivery, security and enterprise architecture teams carries as much weight as technical design. The experience threshold differs between the title received (8+ years) and the mandate description (10+ years), a point submitted to the client.
  
• Target candidate: a solution or integration architect who has already led the modernization or migration of an authentication platform (Auth0 or another identity federation solution) across multiple applications, with OAuth 2.0, OIDC and SAML 2.0 mastered at design level. They produce the architecture documents and migration strategies themselves, and can bring business, security, development and operations teams to alignment.
  

Requirements

Required:

• Authentication and identity and access management (IAM) ecosystem modernization projects
  
• Integration of modern authentication platforms, such as Auth0 and other identity federation solutions
  
• Protocols and standards: OAuth 2.0, OIDC, SAML 2.0 and SSO
  
• Design and implementation of complex integration solutions in distributed, multi-system environments
  
• Migration strategies and transition of legacy systems to modern architectures
  
• Production of solution architectures, impact analyses, migration strategies and architecture documents
  
• Security, data protection and digital access management issues
  
• Agile, multidisciplinary environments involving multiple delivery teams
  
• Coordination of work across business, architecture, security, development and operations teams
  
• Analysis, problem solving and decision making in complex contexts
  
• Communication, simplification and influential leadership
  

Preferred:

• IAM: Auth0, SAMD, MFA, SSO, identity federation
  
• JWT, certificate and encryption mechanisms (in addition to required protocols)
  
• Integration architecture: REST APIs, microservices, SOA, event-driven architectures
  
• Development technologies: Java/Spring Boot, .NET/.NET Core, DevOps, Git, Azure DevOps
  
• Azure Cloud, Docker, Kubernetes/OpenShift
  
• Digital modernization environments: authentication, security, integration in complex ecosystems
  

Asset:

• Major asset: Wealth Management environments and Client’s digital modernization initiatives
  
• Major asset: Conquest, Mako, SmartD, Market-Q platforms
  
• Financial sector or highly regulated environments
  

Profiles to Exclude:

• Solution architect profile whose IAM experience is limited to consuming an existing SSO, with no authentication platform modernization or migration project.
  
• IAM administrator or operator profile (provisioning, account management, console configuration) with no demonstrated target architecture design responsibility.
  
• Security architect profile focused on compliance, governance or risk management, with no application integration deliverable.
  
• Developer or tech lead profile who integrated OAuth or OIDC into a single application, with no architecture mandate spanning multiple applications or client bases.
  
• Enterprise architect profile focused on mapping and strategy, with no solution architecture document produced for an implementation.
  
• Profile with no demonstrated legacy-to-modern architecture migration project.