> Markdown version of [/jobs/ext/1633952-lead-iam-technical-architect](https://www.wearedevelopers.com/jobs/ext/1633952-lead-iam-technical-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead IAM Technical Architect - **Company:** Alexander Mann Solutions - **Location:** Swindon, UK (Remote available) - **Experience:** Expert - **Contract:** Contract - **Skills:** Active Directory, Software as a Service, Cloud Computing, Identity and Access Management, OAuth, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Enterprise Software Applications, HR Software, Enterprise Integration - **Published:** July 11, 2026 - **Apply:** https://computerjobs.com/gb/en/mob/job/BC05F40B4036933255 ## About the Role Strong Identity Governance and Administration (IGA) architecture experience. . Experience designing IAM operating models, identity life cycle processes and access governance frameworks. . Experience developing architecture roadmaps, business cases and strategic technology recommendations. . Experience delivering IAM solutions aligned to Zero Trust principles. . Expertise in enterprise integration and migration architecture. . Ability to engage senior stakeholders and translate business objectives into practical architecture and delivery plans. . Phased delivery design - skilled in defining pragmatic transition states and staged implementation plans aligned to business priorities and technical constraints. Technical Knowledge . Microsoft Entra ID and Entra ID Governance. . Identity Governance and Administration platforms. . Privileged Access Management (PAM). . Active Directory and hybrid identity architectures. . SAML, OAuth2, OpenID Connect and SCIM. . Cloud and SaaS identity integration patterns. Please be aware that this role can only be worked within the UK and not Overseas. Disability Confident As a member of the Disability Confident Scheme, UKRI guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance. In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different". ## Description On behalf of UKRI, we are looking for a Lead IAM Technical Architect (Inside IR35) for an 8 Month Remote contract with occasional visits to Swindon. Role Purpose UKRI is undertaking a strategic programme to modernise its IAM capabilities and establish identity as a foundational control within a Zero Trust security model. The IAM Solution Architect will lead discovery, design and definition for UKRI's Enterprise Identity project and support the Enterprise Security Architect in defining the organisation's IAM strategy and roadmap. The role is accountable for defining the target-state IAM architecture, replacing existing identity governance capabilities and designing modern identity life cycle management processes. The initial phase of the project will focus on IGA. Later phases will expand scope to include AM, PAM and CIAM for which a phased roadmap for adoption will be required. Responsibilities . Successful candidates will be able to demonstrate good coverage and practical experience from previous roles in meeting the following responsibilities: . Assess current IAM capabilities, processes, technologies and operating models. . Conduct gap analysis and identify opportunities for simplification, automation, risk reduction and cost optimisation. . Design scalable identity governance and administration capabilities including joiner/mover/leaver automation, access provisioning and role and entitlement management. . Own designs through delivery, reworking as necessary to get the solution live and realise benefits. . Support technology evaluation, solution selection, procurement activities and business case development. . Define the future-state Identity and Access Management architecture for UKRI. . Establish the architectural vision for identity services across workforce, supplier, partner and external user communities. . Work with architecture, security, delivery and business stakeholders to ensure alignment with UKRI standards and objectives. . Align the target architecture with UKRI security, cloud and Zero Trust strategies. . Ensure future solutions are scalable, supportable and aligned to enterprise standards. . Define integration patterns across HR systems, enterprise applications, cloud platforms, directories and Legacy services. . Develop migration and transition architectures to support replacement of existing IGA capabilities. . Provide technical architectural assurance for IAM-related solution designs and implementation activities. . Identify and communicate architecture risks, assumptions and dependencies. . Support governance forums and provide expert IAM guidance throughout delivery. Key Skills and Experience . Strong Identity Governance and Administration (IGA) architecture experience. . Experience designing IAM operating models, identity life cycle processes and access governance frameworks. . Experience developing architecture roadmaps, business cases and strategic technology recommendations. . Experience delivering IAM solutions aligned to Zero Trust principles. . Expertise in enterprise integration and migration architecture. . Ability to engage senior stakeholders and translate business objectives into practical architecture and delivery plans. . Phased delivery design - skilled in defining pragmatic transition states and staged implementation plans aligned to business priorities and technical constraints. Technical Knowledge . Microsoft Entra ID and Entra ID Governance. . Identity Governance and Administration platforms. . Privileged Access Management (PAM). . Active Directory and hybrid identity architectures. . SAML, OAuth2, OpenID Connect and SCIM. . Cloud and SaaS identity integration patterns. Please be aware that this role can only be worked within the UK and not Overseas. Disability Confident As a member of the Disability Confident Scheme, UKRI guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance. In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different". ## Related Videos - [What if your HR software adapted to you, not the other way around?](https://www.wearedevelopers.com/videos/100259-what-if-your-hr-software-adapted-to-you-not-the-other-way-around) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [From conversational job search to AI agents, must we reinvent recruitment?](https://www.wearedevelopers.com/videos/100252-from-conversational-job-search-to-ai-agents-must-we-reinvent-recruitment) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)