Technical Infrastructure Architect (DV Security Clearance)

At CGI, we empower our architects to shape the future of secure digital transformation. As a Technical Architect, you’ll design and deliver a next-generation on-premise identity solution that underpins the resilience and security of our clients’ most critical systems. You’ll help define and implement a scalable, future-ready access management platform that ensures seamless connectivity and trust across complex environments. This is your opportunity to take ownership of a greenfield solution that drives real-world impact, harnessing creativity and technical excellence to help CGI’s clients stay ahead in an evolving digital landscape.

CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.

Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance.

Candidate Profile

You will play a pivotal role in shaping architecture standards, mentoring engineers, and ensuring delivery quality through collaboration and governance. You’ll also have the opportunity to innovate, influence design decisions, and help define best practice for CGI’s wider identity landscape.

Key Responsibilities

Lead & Innovate: Drive the design and architecture of a new on-premise identity solution using Windows Server 2022, Active Directory, and ADFS.

Develop & Deliver: Define technical standards, principles, and direction for a secure IAM environment.

Mentor & Support: Guide engineering teams through build and deployment phases, ensuring alignment with design intent.

Integrate & Secure: Design and configure federation services, SSO, and RBAC models aligned to business needs.

Collaborate & Govern: Partner with security, networking, and application teams to ensure smooth integration and operational readiness.

Document & Communicate: Produce comprehensive architecture documentation and provide ongoing governance for solution stability and compliance.

Required Qualifications To Be Successful In This Role

You should have strong experience architecting and delivering Microsoft-based identity solutions in secure or regulated environments, with proven expertise in Active Directory, ADFS, and federation technologies. You’ll bring both strategic thinking and hands-on technical depth, with excellent communication skills and a collaborative approach to problem-solving.

Essential Skills And Experience

Extensive experience as a Solution or Technical Architect specialising in Microsoft identity solutions.

Proven track record delivering greenfield IAM environments.

Deep expertise in Windows Server 2022, AD, and ADFS configuration.

Strong knowledge of SAML, OAuth 2.0, and OpenID Connect federation models.

Experience designing and implementing SSO and RBAC frameworks.

Solid understanding of networking fundamentals (DNS, routing, firewalls, load balancing).

Proven leadership and mentoring experience with engineering teams.

Strong documentation, communication, and stakeholder engagement skills.

Desirable

Microsoft Certified: Identity and Access Administrator Associate or Solutions Architect Expert.

Experience with hybrid identity integration and PowerShell automation.

Prior experience in Defence or secure government environments.