> Markdown version of [/jobs/ext/2140461-solution-architect-design-engineer](https://www.wearedevelopers.com/jobs/ext/2140461-solution-architect-design-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Solution Architect / Design Engineer - **Company:** Vallum Associates - **Location:** London, UK - **Salary:** £97,560.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), User Authentication, Cloud Computing, Cloud Engineering, Continuous Integration, Software Design Documents, Disaster Recovery, Federated Identity Management, Identity and Access Management, Key Management, OAuth, OpenID, Public Key Infrastructure, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Technical Review, Policy as Code, Istio, System Availability, Software Security, Event Driven Architecture, Kubernetes, Api Design, Devsecops - **Published:** August 20, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5849541398 ## About the Role * Enterprise solution architecture experience * Strong identity and access management (IAM) expertise * Authentication and authorisation architecture knowledge * Zero Trust architecture experience * Experience with agent identity and workload identity * Identity federation experience, including OIDC, OAuth2, SAML and SCIM * Cloud architecture experience with GCP * Kubernetes and service mesh experience * API architecture and security experience * Event-driven architecture experience * Policy-as-Code experience, including OPA or Cedar * Experience with PKI, certificates and secrets management * DevSecOps and CI/CD experience * Experience designing high availability and resilience solutions * Successful track record working in complex global organisations at pace * Experience producing technical design documentation and architecture decision records * Ability to translate business, security and regulatory requirements into technical solutions ## Description * Provide end-to-end solution architecture and technical design for the IDAM 2.0 programme * Produce high level designs and low level designs for identity capabilities * Define end-to-end solution architecture across business, application, data and infrastructure domains * Translate business, security and regulatory requirements into technical solutions * Develop reference architectures, patterns and design standards for the programme * Define integration patterns between identity platforms, applications and infrastructure * Design cloud-native solutions for GCP and Kubernetes environments * Define authentication, authorisation and federation architectures * Design agent identity, human identity and workload identity capabilities * Define Zero Trust security architecture and trust boundaries * Design API security, service-to-service authentication and workload authentication patterns * Develop event-driven integration architectures using messaging and asynchronous processing * Design Policy Decision Point and Policy Enforcement Point architectures using Policy-as-Code * Define secrets management, certificate lifecycle and PKI integration patterns * Design resilience, disaster recovery and high availability architectures * Ensure solutions meet non-functional requirements for security, scalability, resilience and performance * Produce architecture decision records and design documentation * Support governance through Architecture Review Boards and Design Authorities * Perform solution assurance and technical design reviews across supplier deliveries * Identify technical risks, assumptions, constraints and dependencies * Collaborate with Enterprise Architecture to ensure alignment with strategic architecture * Work with Product Owners to refine technical requirements and delivery priorities * Support engineering teams throughout implementation, testing and production readiness * Mentor engineers and promote engineering best practice * Evaluate new technologies and vendor products against programme requirements * Contribute to roadmap planning and future-state architecture Technologies: * API * Architect * CI/CD * Cloud * DevSecOps * GCP * IAM * Support * Kubernetes * SAML * Security More: We are undergoing a transformation of our Identity and Access Management practices, including the delivery of new tools to overhaul how IAM is carried out in the industry. We are seeking an experienced and dynamic Solution Architect to join our highly skilled team and report into the programme. The role will work closely with IAM architects, business stakeholders and technology partners to deliver secure, scalable and supportable identity services. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Why make use of an integration platform in today's software developments and infrastructure?](https://www.wearedevelopers.com/videos/758-why-make-use-of-an-integration-platform-in-today-s-software-developments-and-infrastructure) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)