IAM Solution Architect
Stott and May
yesterday
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Remote
Tech stack
Microsoft Active Directory
Amazon Web Services (AWS)
Azure
Software as a Service
Cloud Computing
Computer Security
Identity and Access Management
Lightweight Directory Access Protocols (LDAP)
OAuth
Ping (Networking Utility)
Openid Connect
Azure
Zero Trust Network Access
Security Assertion Markup Language (SAML)
Web Platforms
Okta
Cyberark
Togaf
Cloud Migration
SailPoint
Job description
We are seeking an experienced Identity & Access Management (IAM) Architect to join a large, complex organisation undergoing significant transformation across security, cloud, and digital platforms. This role will play a key part in defining and delivering IAM strategy, architecture, and solutions across the enterprise. You will work closely with security, infrastructure, cloud, application, and business teams to ensure identity is designed securely, scalable and in line with best practice., * Define and own the IAM architecture, operating model, and roadmap
- Design secure, scalable IAM solutions across on?prem, cloud and SaaS environments
- Lead architecture for authentication, authorisation, federation, SSO, PAM and IGA
- Provide design authority and assurance across IAM initiatives and projects
- Ensure IAM solutions align with Zero Trust, security standards, and regulatory requirements
- Work with delivery teams to translate architecture into workable technical designs
- Support vendor selection, integration, and implementation activities
- Produce high?quality architecture documentation, HLDs and technical standards
- Act as a subject?matter expert, advising senior stakeholders and technical teams
Requirements
- Proven experience as an IAM Architect in large or enterprise?scale environments
- Strong background in IAM architecture and design
- Hands?on experience with technologies such as:
- Azure AD / Entra ID, Active Directory
- Okta, Ping, ForgeRock or similar
- SailPoint, Saviynt or equivalent IGA tools
- Privileged Access Management (CyberArk, BeyondTrust etc.)
- Strong knowledge of identity protocols (SAML, OAuth2, OpenID Connect, LDAP)
- Experience working within cloud (Azure/AWS) and hybrid environments
- Understanding of security frameworks and regulatory requirements (ISO27001, NIST, GDPR)
- Excellent stakeholder engagement and communication skills
- Comfortable operating in fast?paced, transformation?led programmes
Desirable
- Previous experience in regulated sectors (financial services, utilities, healthcare, etc.)
- Experience working within large transformation or cloud migration programmes
- TOGAF, CISSP or cloud/security certifications
