The IT Solution Architect Provides system architecture and design specifications to support business and operating models and other architectural or security aspects. Keeps the alignment between enterprise architecture blueprint, recommendations and solution implementation. We are looking for a Microsoft 365 Solution Designer with strong expertise in Active Directory (AD), PKI (ADCS), and Microsoft Entra ID to design and implement secure, scalable identity solutions. This role focuses on Identity & Access Management (IAM) across hybrid environments while also supporting broader Microsoft 365 workloads where identity plays a key role. The position combines architecture, engineering, and L3 support responsibilities in a global enterprise environment. ### Responsibilities - Design and implement identity solutions using Active Directory, PKI, and Microsoft Entra ID. - Architect and manage hybrid identity environments (AD + Entra ID integration). - Define and enforce identity governance (provisioning, deprovisioning, access reviews). - Implement secure authentication and access controls (MFA, Conditional Access, RBAC, Zero Trust). - Support SSO, application integrations, and external identity (B2B/B2C) scenarios. - Automate identity processes using PowerShell and Microsoft Graph. - Collaborate with security, compliance, and infrastructure teams on IAM strategy. - Provide L3/L2 support for identity and M365-related incidents and projects. - Contribute to standards, documentation, and continuous improvement initiatives. - Support other M365 workloads (Teams, Exchange, SharePoint) where required. ### Qualifications Must-Have: - Bachelor’s degree in Computer Science or related field 6+ years of experience in IT with focus on IAM and Microsoft technologies. - Strong expertise in Active Directory (AD DS), AD Certificate Services (PKI), and Microsoft Entra ID (Azure AD). - Experience with hybrid identity, SSO, MFA, Conditional Access. - Strong PowerShell scripting and automation skills. - Understanding of authentication protocols (SAML, OAuth, OpenID Connect, Kerberos). - Exposure to Microsoft 365 services. - Experience working in global enterprise environments. Nice to Have - Microsoft certifications (Azure, Security, Identity, M365). - Experience with Microsoft Graph API. - Knowledge of Linux/Unix environments. - Strong problem-solving and analytical skills - Ability to influence and guide cross-functional teams ### About the Team Some of our benefits: - Flexible and hybrid working schemes - A minimum of 90 days of Maternity and Paternity Leave, with the option to return to work within a year following the birth or adoption of a child (based on eligibility) - Life insurance to all employees to provide peace of mind and financial security - Well-being programs to support your mental and physical health - Opportunities to join and receive support from Nokia Employee Resource Groups (NERGs) - Employee Growth Solutions to support your personalized career & skills development - Diverse pool of Coaches & Mentors to whom you have easy access - A learning environment which promotes personal growth and professional development - for your role and beyond [Learn about additional benefits in specific countries](https://www.nokia.com/about-us/careers/our-locations/). ### About the Company Advancing connectivity to secure a brighter world. Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we’re advancing connectivity to secure a brighter world. [Learn more about life at Nokia](https://www.nokia.com/careers/life-at-nokia/). Our recruitment process We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect. If you’re interested in this role but don’t meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity. The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. [Discover more about the recruitment process at Nokia](https://www.nokia.com/careers/#recruitment-process).