> Markdown version of [/jobs/ext/3765648-iam-design-sme-zero-trust-cloud-architecture](https://www.wearedevelopers.com/jobs/ext/3765648-iam-design-sme-zero-trust-cloud-architecture). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Design SME (Zero Trust & Cloud Architecture)

- **Company:** CBS Butler Limited
- **Location:** Sheffield, UK
- **Salary:** £86,721.0
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), User Authentication, Cloud Computing, Cloud Engineering, Cyber Security, Continuous Integration, Identity and Access Management, Key Management, OAuth, OpenID, Public Key Infrastructure, Zero Trust Network Access, Security Assertion Markup Language (SAML), Policy as Code, Google Cloud, Istio, System Availability, Software Security, Event Driven Architecture, Kubernetes, Devsecops
- **Published:** October 16, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5928851182

## About the Role

* Strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture.
 * Enterprise Architecture and Identity & Access Management (IAM) experience.
 * Experience with authentication, authorisation, federation, OIDC, OAuth2, SAML and SCIM.
 * Knowledge of Zero Trust, Agent Identity and Workload Identity.
 * Experience with GCP, Kubernetes, service mesh and cloud architecture.
 * Experience with API security, event-driven architecture and Policy-as-Code (OPA/Cedar).
 * Knowledge of PKI, certificates, secrets management and DevSecOps/CI/CD.
 * Experience with high availability, resilience and security architecture.
 * Experience with architecture governance, stakeholder engagement and technical leadership.

## Description

* Produce end-to-end High-Level and Low-Level Designs (HLDs/LLDs).
 * Define IAM architecture across Human, Agent and Workload Identity.
 * Design Zero Trust, authentication, authorisation and federation solutions.
 * Develop cloud-native architectures across GCP, Kubernetes and service mesh environments.
 * Define secure API, service-to-service authentication and event-driven integration patterns.
 * Design Policy-as-Code, PKI, certificate lifecycle and secrets management solutions.
 * Drive architecture governance, design assurance and technical decision-making across multiple workstreams.
 * Work with architects, engineering teams and senior stakeholders to deliver production-ready solutions.
 * Take technical ownership of identity architecture and translate security, business and regulatory requirements into robust, scalable and supportable designs.

Technologies:

 * API
 * CI/CD
 * Cloud
 * DevSecOps
 * GCP
 * IAM
 * Kubernetes
 * SAML
 * Security
 * Architect