Design SME - IAM

• Produce high-level and low-level designs for identity capabilities.
• Define end-to-end technical solutions across business, application, data and infrastructure domains.
• Translate business, security and regulatory requirements into technical solutions.
• Develop reference architectures, patterns and design standards for the programme.
• Define integration patterns between identity platforms, applications and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and federation architectures.
• Design Agent Identity, Human Identity and Workload Identity capabilities.
• Define Zero Trust security architecture and trust boundaries.
• Design API security, service-to-service authentication and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle and PKI integration patterns.
• Design resilience, disaster recovery and high-availability architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
• Produce architecture decision records (ADRs) and design documentation.
• Support governance through Architecture Review Boards and Design Authorities.
• Perform solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints and dependencies.
• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing and production readiness.
• Mentor engineers and promote engineering best practice.
• Evaluate new technologies and vendor products against programme requirements.
• Contribute to roadmap planning and future-state architecture.

Technologies:

• API
• CI/CD
• Cloud
• DevSecOps
• GCP
• IAM
• Support
• Kubernetes
• SAML
• Security
• DevOps

More:

We are seeking an architecture professional to shape identity capabilities and technical solutions across a programme. The role focuses on identity, cloud-native and security architecture, with collaboration across Enterprise Architecture, Product Owners, suppliers and engineering teams.

• Enterprise Architecture
• Identity and Access Management (IAM)
• Authentication and authorisation
• Zero Trust Architecture
• Agent Identity and Workload Identity
• Identity federation: OIDC, OAuth2, SAML and SCIM
• Cloud architecture, particularly GCP
• Kubernetes and service mesh
• API architecture and security
• Event-driven architecture
• Policy-as-Code, including OPA and Cedar
• PKI, certificates and secrets management
• DevSecOps and CI/CD
• High availability and resilience design
• Security architecture
• Architecture governance
• Stakeholder management
• Technical leadership