> Markdown version of [/jobs/ext/2432726-iam-architect](https://www.wearedevelopers.com/jobs/ext/2432726-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect - **Company:** Talent International - **Location:** Swindon, UK - **Experience:** Expert - **Salary:** £182,000.0 - £195,000.0 - **Contract:** Temporary contract - **Skills:** Amazon Web Services, User Authentication, Data Auditing, Identity and Access Management, OpenID, Azure Active Directory, Migration Manager, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Session Management, Customer Identity Access Management, Legacy Systems - **Published:** August 13, 2026 - **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-78D7BACF844D88D790/ ## About the Role We are looking for a senior technical leader with demonstrable success delivering large-scale IAM transformations across complex, federated environments. Key Technical Skills and Experience: * ISO 24760 and Zero Trust Architecture (ZTA): Deep understanding of ZTA principles and standard reference architectures, translating them into policy-driven, risk-based access decisions. * Multi-Pillar IAM Architecture: Proven design experience across IGA, AM, PAM, CIAM, and Non-Human Identity frameworks. * Enterprise Identity Platforms: Hands-on architecture experience with technologies such as Microsoft Entra ID, AWS Cognito, specialized IGA/PAM engines, and HMG Gov.UK OneLogin (highly desirable). * Identity Assurance and Standards: Familiarity with modern auth protocols (OIDC, SAML, FIDO2, WebAuthn, SCIM) and identity assurance levels (IALs/AALs). * Migration and Coexistence Design: Track record in designing low-disruption transition architectures to sunset Legacy systems while maintaining security and business continuity. * Senior Leadership and Governance: Exceptional stakeholder management skillsable to bridges the gap between technical teams, security leads, and senior business executives., If you have the architectural vision and technical gravitas to lead this capability, we'd love to speak with you. ## Description Are you an expert Enterprise Identity Architect with deep Zero Trust expertise? Looking for a high-impact role where identity isn't just an IT function, but the primary security control plane?, We have partnered with a major, high-profile organization to spearhead a landmark, two-year identity transformation programme. We are seeking a visionary Principal Enterprise IAM Architect to design, establish, and oversee the rollout of a future-fit, Zero Trust-aligned identity architecture. The Project Brief This strategic transformation will elevate Identity and Access Management (IAM) across the entire enterprise ecosystem, establishing identity as the core security control for networks, devices, applications, and data. You will lead the end-to-end designfrom current-state gap and risk analysis through to a multi-year transition architecture and phased delivery roadmap. Key Deliverables and Responsibilities: * Target Architecture Design: Define a coherent enterprise identity architecture aligned to ISO 24760 standards, ensuring strict separation of Identity Authority, Relying Parties, and Verification Services. * Current-State Risk Assessment: Evaluate existing service integrations (Entra ID, ideiio, AWS Cognito) across Zero Trust frameworks, least-privilege principles, and security assurance requirements. * Core IAM Pillar Blueprinting: Design modern, scalable architectures covering: * IGA and JML: End-to-end automated identity life cycle (Joiner-Mover-Leaver), policy-driven access, SCIM integration, and data quality assurance. * Authentication and AM: Adaptive, risk-based access controls (Conditional Access), phishing-resistant MFA, passwordless patterns, and session management. * PAM: Just-in-time (JIT) access, segregation of duties, and least-privilege administrative controls. * Verification and CIAM: Customer/citizen identity management aligned with HMG verification platforms (eg, Gov.UK OneLogin) and GPG45 assurance standards. * Machine and Non-Human Identities (NHI/MIM): Life cycle governance for service accounts, keys, and certificates. * Integration Fabric and Federation: Design secure, standards-based identity integration patterns enabling seamless federation with associate bodies, suppliers, and third parties. * Transition and Implementation Roadmap: Map out the phased migration strategy from Legacy services (including ideiio replacement), driving a Year 1 focus on core IGA/AM controls and a Year 2 expansion to PAM, CIAM, and full automation. ## Related Videos - [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready) - [A walkthrough on Responsible AI Frameworks and Case Studies](https://www.wearedevelopers.com/videos/509-a-walkthrough-on-responsible-ai-frameworks-and-case-studies) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)