> Markdown version of [/jobs/ext/2254587-service-architect](https://www.wearedevelopers.com/jobs/ext/2254587-service-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Service Architect - **Company:** Infinity Quest - **Location:** UK - **Experience:** Expert - **Salary:** £52,779.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Access Network, Application Integration Architecture, Cyber Security, Databases, Identity and Access Management, Networking Hardware, Key Management, Metadata, Service-Oriented Architecture, Service Design, Data Streaming - **Published:** August 26, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5855655390 ## About the Role Candidates should have experience in several of the following areas: Service architecture or service design in a large organisation. IAM, PAM, infrastructure access, or security architecture. Designing services across people, process, technology, data, and controls. Risk-based access models and control design. Infrastructure platforms, including servers, databases, cloud platforms, network devices, containers, and administrative tooling. Using data from identity systems, application inventories, CMDBs, infrastructure inventories, entitlement stores, or control platforms. Designing access request, approval, fulfilment, monitoring, review, revocation, and exception processes. Working in regulated, audited, or control-heavy environments. Experience with cloud IAM, secrets management, zero standing privilege, just-in-time access, attribute-based access control, service accounts, non-human identities, security monitoring, session recording, or financial services would be useful. ## Description We are looking for a Senior or Lead Service Architect to design the enterprise service model for infrastructure access, including privileged access. The role defines how users, identities, applications, servers, databases, cloud platforms, network devices, approval routes, risk controls, data sources, and support teams work together. This is not a PAM tooling role. It is a service architecture role across identity, privileged access, infrastructure, cyber security, risk, audit, service management, and engineering. The organisation needs to replace fragmented access processes, manual approvals, local exceptions, and tool-specific designs with one risk-based access service. That service must use identity, application, and infrastructure data to decide how access is requested, approved, granted, monitored, reviewed, and removed. Role purpose The Service Architect will design the target service for privileged access, server access, cloud administration, database administration, network access, emergency access, third-party access, break-glass access, and just-in-time access. The role defines the service blueprint, access patterns, process flows, approval paths, team responsibilities, metadata, control points, integrations, operating model, and transition roadmap. Key responsibilities Design the end-to-end service architecture for infrastructure access and privileged access. Define the target service model, including processes, roles, controls, data flows, integrations, and operational hand-offs. Create a risk-based access model that sets the access pattern, approval route, monitoring level, and review frequency. Define patterns for standing access, time-bound access, just-in-time access, emergency access, third-party access, cloud access, and privileged administration. Define how identity, application, infrastructure, entitlement, account, risk, and control data are used in access decisions. Identify trusted data sources, data owners, data quality rules, and exception handling. Design controls for least privilege, authorised access, traceability, monitoring, timely removal, access reviews, and audit evidence. Define how evidence is produced through workflows, logs, approvals, access records, and session records. Identify current-state gaps and define steps to move to the target service. Work with IAM, PAM, infrastructure, cloud, application, cyber security, risk, audit, service management, and engineering teams. Challenge access processes that are inconsistent, too manual, poorly owned, or designed around individual tools. Key deliverables The role will produce: Service blueprint and privileged access service model Access pattern catalogue and risk-based decision model Process maps, RACI, and ownership model Metadata, data, control, and evidence models Integration architecture and operating model Exception, break-glass, and onboarding designs Reporting requirements and transition roadmap ## Related Videos - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [A Data Mesh needs Open Metadata](https://www.wearedevelopers.com/videos/505-a-data-mesh-needs-open-metadata) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Why you shouldn’t build a microservice architecture ](https://www.wearedevelopers.com/videos/261-why-you-shouldn-t-build-a-microservice-architecture) - [Crafting Custom Frameworks with Rust: A Deep Dive into Procedural Macros](https://www.wearedevelopers.com/videos/849-crafting-custom-frameworks-with-rust-a-deep-dive-into-procedural-macros) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)