IAM Solution Architect - Design Engineer

Vallum
Sheffield, United Kingdom
yesterday

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English

Job location

Remote
Sheffield, United Kingdom

Tech stack

User Authentication
Cloud Computing
Cloud Engineering
Computer Security
Continuous Integration
Disaster Recovery
Identity and Access Management
Key Management
OAuth
OpenID
Public Key Infrastructure
Zero Trust Network Access
Security Assertion Markup Language (SAML)
Software Technical Review
Policy as Code
Istio
System Availability
Software Security
Event Driven Architecture
Kubernetes
Api Design
Devsecops

Job description

Define end-to-end solution architecture across business, application, data and infrastructure domains.

Translate business, security and regulatory requirements into technical solutions.

Develop reference architectures, patterns and design standards for the programme.

Define integration patterns between identity platforms, applications and infrastructure.

Design cloud-native solutions for GCP and Kubernetes environments.

Define authentication, authorisation and federation architectures.

Design Agent Identity, Human Identity and Workload Identity capabilities.

Define Zero Trust security architecture and trust boundaries.

Design API security, service-to-service authentication and workload authentication patterns.

Develop event-driven integration architectures using messaging and asynchronous processing.

Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.

Define secrets management, certificate life cycle and PKI integration patterns.

Design resilience, disaster recovery and high availability architectures.

Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.

Produce architecture decision records (ADRs) and design documentation.

Support governance through Architecture Review Boards and Design Authorities.

Perform solution assurance and technical design reviews across supplier deliveries.

Identify technical risks, assumptions, constraints and dependencies.

Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.

Work with Product Owners to refine technical requirements and delivery priorities.

Support engineering teams throughout implementation, testing and production readiness.

Mentor engineers and promote engineering best practice.

Evaluate new technologies and vendor products against programme requirements.

Contribute to roadmap planning and future-state architecture.

Requirements

Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities., * Enterprise Solution Architecture

  • Identity and Access Management (IAM)
  • Authentication and Authorisation
  • Zero Trust Architecture
  • Agent Identity and Workload Identity
  • Identity Federation (OIDC, OAuth2, SAML, SCIM)
  • Cloud Architecture (GCP)
  • Kubernetes and Service Mesh
  • API Architecture and Security
  • Event-driven Architecture
  • Policy-as-Code (OPA/Cedar)
  • PKI, Certificates and Secrets Management
  • DevSecOps and CI/CD
  • High Availability and Resilience Design
  • Security Architecture
  • Architecture Governance
  • Stakeholder Management
  • Technical Leadership

Apply for this position