Appealing points:
- Lead large-scale identity transformation, owning end-to-end architecture and migration strategy across Entra ID, Keycloak, authentication, and identity lifecycle technologies.
- Drive critical architectural decisions, evaluating migration approaches, managing complex dependencies, and defining secure cutover, rollback, and recovery strategies.
- Operate at a principal-level architecture role, influencing global engineering teams and stakeholders while solving complex IAM challenges across enterprise application environments.
Annual Salary : 6 million yen and above
Job Responsibilities:
Architecture & Solution Design
- Own the end-to-end technical architecture and migration strategy for the Domain Migration programme.
- Evaluate and recommend viable migration approaches, including current-tenant migration versus new-tenant migration, based on technical feasibility, risk, business impact, migration effort and rollback capability.
- Establish the target-state architecture and technical principles for the migration.
- Define solutions covering Entra ID, Keycloak, SAML, OIDC, OAuth, SCIM, JIT provisioning and related identity technologies.
- Identify architectural constraints, technical risks and required remediation activities.
Technical Authority & Decision-Making
- Act as the senior technical authority for the migration.
- Drive technical decisions where cross-team consensus cannot be reached.
- Provide clear recommendations, decision papers and technical direction to project and business stakeholders.
- Resolve complex technical issues and remove architecture-related delivery blockers.
- Ensure engineering activity remains aligned to the approved migration architecture.
Dependencies & Readiness
- Establish and maintain the technical dependency model across applications, IDPs, identity lifecycle processes and supporting services.
- Assess application dependencies, technical impacts and migration readiness.
- Identify high-risk application and authentication patterns requiring additional validation or remediation.
- Coordinate PMs, engineers, application owners, vendors and IDP teams to ensure technical dependencies are understood and addressed.
Validation, Testing & Cutover
- Prove the proposed migration approach through technical validation and testing before production cutover.
- Define technical test scenarios and acceptance criteria for high-risk migration patterns.
- Establish documented cutover, rollback and recovery procedures.
- Define technical go/no-go and rollback criteria.
- Review and approve technical readiness for migration waves and final cutover.
- Provide technical leadership during cutover and post-migration stabilisation.
Stakeholder Communication
- Translate complex technical issues and architectural decisions into clear business-level recommendations.
- Lead technical workshops and architecture reviews.
- Provide regular visibility of technical risks, decisions, dependencies and readiness.
- Ensure technical decisions are appropriately documented and communicated.
Post-Migration Stabilisation
- Lead resolution of significant technical issues arising during migration.
- Validate the post-migration environment and authentication/provisioning behaviour.
- Support transition of the final architecture and operational knowledge to the appropriate IT teams.
Job Qualifications:
- Principal-level enterprise architecture or solution architecture experience.
- Strong enterprise Identity and Access Management (IAM) and Identity Provider (IDP) expertise.
- Demonstrated experience with Entra ID, Keycloak, SAML, OIDC, OAuth, SCIM and JIT provisioning.
- Proven experience designing and executing large-scale domain, authentication, identity or application migrations.
- Experience evaluating competing migration architectures and making recommendations based on risk, feasibility and business requirements.
- Strong understanding of application dependencies, authentication flows, provisioning and user identity matching.
- Experience designing and validating cutover, rollback and recovery strategies.
- Strong technical decision-making and problem-solving capability.
- Ability to operate effectively with incomplete information and complex cross-functional dependencies.
- Excellent communication, documentation and stakeholder management skills.
Language Proficiency: Fluent level English
Company Description:
Company Systems is an Information Technology services organization with a focus on IT Services and Quality Management solutions for Global 2000 customers in Japan and Hong Kong. At the Company, we firmly believe that proximity and partnership-based collaborative working model at our client’s workplace are fundamental to the success of major IT initiatives. Our approach is to work in close partnership, understand your business to offer solutions that are relevant to you and align our way of functioning that enables your success. While we recommend our engagement at the early stages of programs or projects to assist our clients with true value discovery, our model allows us to get involved even at different stages of the project life cycle. We know, you have a choice of Technology and Outsourcing service providers for the needs of your IT organization. However, by engaging the Company, we can guarantee you the success of your IT initiatives through the unique blend of our focus on nurturing long-term relationships, our superior technical expertise, and our uncompromising commitment to service excellence.
. Skillset Required: Identity Transformation, End-to-End Architecture, Migration Strategy, Entra ID, Keycloak, Authentication, Identity Lifecycle Technologies, Architectural Decision-Making, Migration Approach Evaluation, Technical Dependency Management, Cutover Strategy, Rollback Strategy, Recovery Strategy, IAM (Identity and Access Management), Enterprise Applications, Solution Architecture, Enterprise Architecture, SAML, OIDC, OAuth, SCIM, JIT Provisioning, Identity Provider (IDP), Risk Assessment, Business Impact Analysis, Technical Risk Identification, Remediation Planning, Technical Leadership, Stakeholder Management, Application Dependency Assessment, Technical Impact Assessment, Migration Readiness Assessment, Technical Validation, Testing, Test Scenario Definition, Acceptance Criteria Definition, Cutover Procedures, Rollback Procedures, Recovery Procedures, Go/No-Go Criteria, Technical Readiness Assessment, Technical Issue Resolution, Post-Migration Validation, Domain Migration, Application Migration, Authentication Flows, Provisioning, User Identity Matching, Problem-Solving, Cross-Functional Coordination, Vendor Management, Communication, Documentation, Technical Workshops, Architecture Reviews, Quality Management