Workforce Identity Architect, VP

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

 

Job Summary

The Workforce Identity Architect is a senior architecture role responsible for defining and governing workforce (human) identity architecture at global scale. This role designs and standardizes how employee and partner identities are created, governed, authenticated, authorized, reviewed, and retired across hybrid and cloud environments.

The Workforce Identity Architect operationalizes global IAM standards for human identity, ensuring secure, scalable, and auditable access while supporting regions transitioning through different identity maturity stages. This role focuses on architecture, standards, and enablement, not day‑to‑day operations or tool administration.

Key Responsibilities:

Workforce Identity Architecture

• Define and maintain global workforce identity architecture using Microsoft Entra ID in hybrid and cloud‑mastered environments.
• Establish standard patterns for authentication, federation, Conditional Access, and MFA.
• Design tenant‑level identity integration patterns that scale across applications and regions.

Identity Lifecycle Management

• Architect and standardize Joiner / Mover / Leaver (JML) identity lifecycle patterns driven by authoritative HR sources.
• Ensure consistent provisioning, modification, and deprovisioning of workforce identities.
• Reduce orphaned, dormant, and over‑provisioned access through strong lifecycle design.

Identity Governance & Privileged Access

• Define workforce identity governance standards, including access requests, access reviews, and separation of duties (SoD).
• Architect privileged access models for workforce identities, including PIM and Just‑in‑Time access.
• Ensure access models are auditable and aligned to regulatory and risk expectations.

AI‑Assisted Analytics & Access Optimization

• Leverage analytics and AI‑assisted capabilities to improve role and entitlement design.
• Reduce access certification noise by improving role quality, review scoping, and access rationalization.
• Translate analytic insights into architectural improvements rather than one‑off reporting.

External & Partner Identity

• Define B2B and partner identity patterns using Entra ID that enable collaboration while maintaining centralized governance.
• Ensure third‑party access aligns with global standards and workforce identity controls.

Metrics & Continuous Improvement

• Partner with IAM Governance teams to define and consume workforce identity metrics, including access quality, review effectiveness, and lifecycle hygiene.
• Use metrics to continuously improve identity architecture and reduce access risk.

What This Role Is — and Is Not

This role is:

• A senior architecture and standards role
• Focused on workforce identity at enterprise and global scale
• A bridge between architecture, security, risk, and delivery team

This role is not:

• An IAM operation or helpdesk role
• A single‑tool administrator position
• A regional‑only identity role

What Success Looks Like

• Consistent, scalable workforce identity standards adopted across regions
• Reduced access risk and certification fatigue
• Clear lifecycle ownership and audit‑ready access governance
• Smooth regional progression toward cloud‑mastered identity

Why