> Markdown version of [/jobs/ext/3134466-iam-architect](https://www.wearedevelopers.com/jobs/ext/3134466-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Architect

- **Company:** Neweasy
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £100,000.0 - £120,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Active Directory, Systems Engineering, Authentication Protocols, Microsoft Azure, Cyber Security, Network Topologies, Identity and Access Management, Intrusion Detection and Prevention, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Network Segmentation, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Customer Identity Access Management, Information Technology, Enterprise Integration, Restful APIs
- **Published:** September 29, 2026
- **Apply:** https://www.reed.co.uk/jobs/iam-architect/57400103

## About the Role

* Extensive hands-on experience in IAM, identity engineering or architecture within large enterprise environments, including leading complex IAM design initiatives
 * Deep expertise in Microsoft identity and security: Entra ID, on-prem AD, Conditional Access at scale and privileged access
 * Strong command of SSO and authentication protocols, RBAC design, entitlement management and automated provisioning
 * PowerShell and RESTful integration skills for identity automation
 * An understanding of network topologies, NDR and micro-segmentation, and how they interact with IAM
 * Microsoft Certified: Identity and Access Administrator Associate (required). CISSP, Azure Cybersecurity Expert or CIAM are a strong advantage
 * A degree in Computer Science or a related field, or equivalent experience
 * The ability to explain complex identity concepts clearly to technical and non-technical audiences

Global enterprise experience is preferred.

## Description

You will design and develop the firm's IAM architecture across identity lifecycle, access governance and privileged access. Working with the Information Security and Platform Engineering teams, you will embed zero trust and least privilege principles throughout the organisation. You will also be responsible for global firewall design and architecture., * Designing authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and Conditional Access policies aligned with Microsoft best practice

 * Architecting privileged access management capability, including approval workflows and continuous monitoring
 * Leading identity governance automation, MFA integration and identity threat detection and response (ITDR)
 * Guiding the hardening of multi-site Active Directory and Entra ID environments
 * Integrating IAM with HR, IT and engineering systems for policy-driven access across the user lifecycle
 * Supporting audit readiness (ISO 27001, ISO 22301) and designing Azure Policies and guardrails with Security
 * Maintaining reference architectures, standards and runbooks, and presenting architecture decisions to senior business and IT leaders


## Related Videos

- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [REST In Peace: Why LLMs Can't CRUD](https://www.wearedevelopers.com/videos/100272-rest-in-peace-why-llms-can-t-crud)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)