> Markdown version of [/jobs/ext/3721236-iam-design-sme-nextgen](https://www.wearedevelopers.com/jobs/ext/3721236-iam-design-sme-nextgen). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Design SME - NextGen

- **Company:** Square One Resources Limited
- **Location:** Sheffield, UK
- **Salary:** £130,000.0 - £146,380.0
- **Contract:** Temporary contract
- **Skills:** Cloud Computing, Continuous Integration, Disaster Recovery, High-Level Architecture, Identity and Access Management, Key Management, Enterprise Messaging Systems, OAuth, OpenID, Public Key Infrastructure, Zero Trust Network Access, Security Assertion Markup Language (SAML), Policy as Code, Google Cloud, System Availability, Software Security, Event Driven Architecture, Kubernetes, Cloud Integration, Devsecops
- **Published:** October 14, 2026
- **Apply:** https://www.careerboard.com/gb/en/find-jobs-in-United-Kingdom/-FBC7A85827754433F6/

## About the Role

The ideal candidate will have the following:

 1. Enterprise IAM Architecture: Strong experience designing and delivering enterprise Identity and Access Management solutions within large, complex organisations.
 2. Identity & Security: Excellent knowledge of authentication, authorisation, Zero Trust architecture and federation protocols, including OAuth 2.0, OIDC, SAML and SCIM.
 3. Cloud & Container Architecture: Experience with GCP, Kubernetes, API security and service-to-service or workload authentication patterns.
 4. Advanced Identity Capabilities: Experience designing human, agent and workload identity solutions, alongside Policy-as-Code technologies such as OPA or Cedar.
 5. Security Engineering: Knowledge of PKI, certificate life cycle management, secrets management, DevSecOps and CI/CD practices.
 6. Technical Design & Leadership: Proven experience producing HLDs and LLDs, conducting design assurance, supporting architecture governance and engaging senior technical stakeholders.

Desirable Skills/Experience

Although not essential, the following skills are desired by the client:

 1. Experience with service mesh technologies and cloud-native security patterns.
 2. Knowledge of event-driven architecture, messaging platforms and asynchronous processing.
 3. Experience designing high availability, disaster recovery, resilience and performance capabilities.
 4. Experience delivering large-scale IAM transformation programmes, evaluating identity technology vendors and defining future-state architecture roadmaps.

## Description

You will play a key role in defining and delivering next-generation IAM capabilities, working closely with architects, security specialists, business stakeholders and engineering teams to translate requirements into robust technical solutions.

 1. Technical Design & Architecture: Produce High-Level Designs (HLDs), Low-Level Designs (LLDs) and end-to-end technical solutions, ensuring alignment with enterprise architecture and security requirements.
 2. Identity & Zero Trust: Design authentication, authorisation, identity federation and Zero Trust architectures, covering human identity, agent identity and workload identity.
 3. Cloud & Integration Architecture: Develop cloud-native identity solutions across GCP and Kubernetes, including API security, service-to-service authentication and event-driven integration patterns.
 4. Security & Policy Design: Define Policy-as-Code architectures, Policy Decision Points (PDPs), Policy Enforcement Points (PEPs), secrets management, certificate life cycle management and PKI integration.
 5. Architecture Governance: Lead technical design reviews, contribute to Architecture Review Boards, document architecture decisions and ensure solutions meet enterprise standards and regulatory requirements.
 6. Engineering & Technical Leadership: Support implementation, testing and production readiness, review supplier deliverables, manage technical risks and mentor engineering teams in best practice.