
IGA Domain and Solution Architect
Our Take
Define and govern enterprise Identity Governance Administration (IGA) architecture for a global food retail group.
What you’ll do
- Define and maintain the IGA target-state architecture and roadmap.
- Design enterprise-scale IGA solutions for access governance and provisioning.
- Provide architectural oversight from concept through implementation and deployment.
- Serve as lead architect for complex IAM and IGA initiatives.
- Support incident investigations and root cause analysis for IAM challenges.
What they’re looking for
- Minimum 8 years in IAM, IGA, or Cyber Security Architecture.
- Proven experience designing enterprise IAM and IGA architectures.
- Strong knowledge of identity lifecycle management and user provisioning.
- Expertise in RBAC, ABAC, authentication, and authorization models.
- Experience creating architecture roadmaps and governance frameworks.
Skills & Focus Areas
- IGA
- Identity Governance Administration
- IAM
- Identity Lifecycle Management
- Access Governance
- Role Management
- Authentication
- Authorization
As posted by Ahold Delhaize
Ahold Delhaize Group is one of the world's largest food retail groups and a leader in both supermarkets and e-commerce. Our family of great local brands serves more than 50 million customers each week across Europe, the United States, and Indonesia. Together, these brands employ more than 420,000 associates in more than 7,000 grocery and specialty stores.
While Ahold Delhaize Group is headquartered in Zaandam, the Netherlands, our associates work across all the countries we serve. The Global Support Organization provides expertise and services that enable our local brands to succeed, supporting key areas including Finance, Human Resources, Information Technology, Legal, Communications, Sustainable Retailing, Cyber Security, and Enterprise Architecture.
At Ahold Delhaize, we combine the scale of a global organization with the entrepreneurial spirit of strong local brands. We are committed to building innovative, secure, and sustainable technology solutions that help our brands serve customers better every day.
Primary Purpose
The IGA Domain and Solution Architect is responsible for defining, governing, and evolving enterprise Identity Governance & Administration (IGA) architecture across Ahold Delhaize. This role provides strategic architectural leadership for identity lifecycle management, access governance, role management, authentication, authorization, and identity integrations while ensuring alignment with business objectives, security requirements, and enterprise architecture standards.
Working closely with business leaders, security teams, product owners, engineers, and enterprise architects, the role serves as a trusted advisor for IAM strategy, roadmap development, and large-scale solution delivery. The architect balances innovation, security, operational efficiency, and business value to deliver scalable and sustainable identity solutions.
Duties and Responsibilities
Strategy, Governance, and Roadmap
- Define and maintain the IGA target-state architecture and roadmap aligned with enterprise architecture principles and business objectives.
- Translate technology strategy into scalable IAM governance models, standards, policies, and operating procedures.
- Partner with business and technology leaders to align identity initiatives with strategic priorities and investment decisions.
- Evaluate emerging technologies, industry trends, and market capabilities to identify opportunities for modernization and innovation.
- Drive architecture planning across multiple technology domains and large-scale programs.
Domain and Solution Architecture
- Design enterprise-scale Identity Governance & Administration solutions supporting identity lifecycle management, access governance, provisioning, and role management.
- Define architectures supporting Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), authentication, authorization, and compliance requirements.
- Develop architecture deliverables including reference architectures, high-level solution designs, Project State Architecture (PSA) documents, and technology standards.
- Ensure solutions are secure-by-design, compliant-by-design, scalable, resilient, and aligned with approved architectural standards.
- Provide architectural oversight throughout the solution lifecycle from concept through implementation and deployment.
Delivery Leadership
- Serve as the lead architect for large and complex IAM and IGA initiatives.
- Provide technical leadership and guidance to Product Owners, Solution Architects, Engineers, and Delivery Teams.
- Ensure architecture standards, design principles, and governance requirements are consistently applied across initiatives.
- Review and approve solution designs, ensuring alignment with enterprise architecture and security requirements.
- Act as a subject matter expert for Identity Governance & Administration capabilities and best practices.
Operational and Support Responsibilities
- Serve as an escalation point for complex identity and access management challenges.
- Support incident investigations, impact assessments, root cause analysis, and remediation planning.
- Collaborate with operational teams to address recurring issues and improve platform stability, scalability, and performance.
- Support internal and external audits by providing architectural documentation and design rationale.
- Evaluate design deviations and technical debt and recommend remediation strategies.
- Participate in Manager on Duty (MoD) responsibilities as required.
Qualifications
Required Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cyber Security, Engineering, Business Information Systems, or a related field.
- Minimum of 8 years of progressive experience in Identity and Access Management (IAM), Identity Governance & Administration (IGA), Cyber Security Architecture, or Enterprise Architecture.
- Proven experience designing and implementing enterprise IAM and IGA architectures within large, complex organizations.
- Experience developing architecture roadmaps, target-state architectures, and governance frameworks.
- Strong knowledge of identity lifecycle management, user provisioning, access management, and governance processes.
- Demonstrated expertise in RBAC, ABAC, authentication, authorization, and access governance models.
- Experience creating and maintaining architecture artifacts including reference architectures, standards, and solution design documentation.
- Strong stakeholder management, communication, and influencing skills.
- Ability to advise senior business and technology leaders on strategic architecture decisions.
- Experience leading large and complex technology initiatives from architecture through delivery.
Preferred Qualifications
- Master's degree in Information Technology, Computer Science, Cyber Security, Business Administration, or a related discipline.
- Industry certifications such as TOGAF, CISSP, SABSA, or leading IAM/IGA platform certifications.
- Experience with enterprise-scale Identity Governance platforms and cloud-based identity architectures.
- Experience establishing architecture standards, governance processes, and technology roadmaps.
- Demonstrated success delivering complex transformation initiatives across multiple technology domains.
- Experience mentoring architects and serving as a functional leader within an architecture community of practice.
The Ahold Delhaize Group sets global strategies frameworks, facilitates the sharing of best practice and encourages economies of scale. Great examples include sharing technology and digital know-how, so we can continue to lead in online and in-store retailing, setting global targets for healthy and sustainable products-including reducing food waste, use of plastics and making our products healthier to use and eat, and championing development for our future leaders-from learning about the digital mindset to leading our stores of the future.
Under the federal Transparency in Coverage rule, group health plans are required to make publicly available machine-readable files that include in-network rates and out-of-network allowed amounts and billed charges. Click the link to view the in-network rates and out-of-network allowed amounts and billed charges under the welfare benefits plan in which Ahold Delhaize Group participates
We are an equal opportunity employer. We comply with all applicable federal, state and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status or any other characteristic protected by law.