IGA Domain and Solution Architect

How you can make a difference

As IGA Architect, you will join our Enterprise Architecture / Cyber Security & IAM community and help shape how access is managed across Ahold Delhaize. Together with security, technology, and business teams, we design identity and access solutions that keep our systems and data secure—while making it easy for colleagues to get the right access at the right time. Your work will directly support safe, efficient operations across a complex, international environment.

In this role, you will take ownership of enterprise-wide Identity Governance & Administration (IGA) architecture: from user provisioning and system integrations to RBAC/ABAC, authentication and authorization frameworks, and access governance capabilities. You’ll help define the IAM roadmap aligned with business and security priorities, translate strategy into clear architecture documentation, and provide technical leadership to delivery teams. We’re looking for a pragmatic, outcome-driven architect who can balance speed and practicality with architectural rigor—delivering solutions that are secure, scalable, and sustainable.

Key responsibilities of your role

You will work on a variety of assignments that cover the full scope of IGA architecture, governance and delivery support, including:

• Translate IT strategy into scalable IGA/IAM governance, standards, processes, and target operating models; define and monitor policies, procedures and KPIs.
• Define and manage the IGA target-state architecture and roadmap, aligned with Global IT and Enterprise Architecture; advise stakeholders on portfolio priorities and investment choices.
• Provide architectural leadership across delivery: guide Product Owners, solution architects and engineers, and maintain core artifacts (e.g., PSA, reference architecture, high-level designs, IGA policies/standards).
• Design and review IGA solutions end-to-end: turn requirements into blueprints, ensure license-efficient and vendor-aligned designs, and deliver secure/compliant-by-design, scalable and future-proof outcomes.
• Support delivery and operations as escalation point: resolve design issues and risks, drive remediation and stability improvements, support audits and major incidents (impact analysis/RCA), and rotate as Manager on Duty (MoD) quarterly.

What’s in it for you?

Aside from what we ask of you in this role, we also have a great deal to offer you: plenty of growth opportunities and various cross-brand career options; flexible working hours; a hybrid working model (we ask you to spend at least 50% of your working time at the office); and the chance to drive meaningful change on a global scale. You can look forward to a good work-life balance, and the chance to work in an inclusive environment that wholeheartedly encourages growth and welcomes you just the way you are.

Requirements

• Proven experience in IGA/IAM architecture, including designing target-state architectures and roadmaps in large/complex environments.
• Strong knowledge of IGA/IAM governance: policies, standards, procedures, controls, and KPI-driven process monitoring.
• Hands-on expertise in identity lifecycle capabilities (e.g., joiner/mover/leaver), provisioning, access requests/approvals, and access reviews/certifications.
• Solid understanding and practical application of RBAC/ABAC, authentication/authorization concepts, and “secure-by-design / compliant-by-design” principles.
• Experience producing and maintaining architecture deliverables such as reference architectures, PSA documents, and high-level solution designs.
• Ability to provide technical leadership and architectural guidance to Product Owners, solution architects, engineers, and delivery teams end-to-end.
• Strong stakeholder management skills—able to advise business and IT leaders on portfolio prioritization and investment decisions.
• Experience supporting operations: incident impact analysis, RCA, audit support, and managing design deviations/technical debt.