​The Role: IAM Solution Architect – Design Engineer

Location: Sheffield, UK

Position Type: Contract Inside IR35

Remote work option Available: Hybrid – 3 Days Onsite

​

Job Description:

Key Skills & Experience

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.

• Define end-to-end solution architecture across business, application, data and infrastructure domains.

• Translate business, security and regulatory requirements into technical solutions.

• Develop reference architectures, patterns and design standards for the programme.

• Define integration patterns between identity platforms, applications and infrastructure.

• Design cloud-native solutions for GCP and Kubernetes environments.

• Define authentication, authorisation and federation architectures.

• Design Agent Identity, Human Identity and Workload Identity capabilities.

• Define Zero Trust security architecture and trust boundaries.

• Design API security, service-to-service authentication and workload authentication patterns.

• Develop event-driven integration architectures using messaging and asynchronous processing.

• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.

• Define secrets management, certificate lifecycle and PKI integration patterns.

• Design resilience, disaster recovery and high availability architectures.

• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.

• Produce architecture decision records (ADRs) and design documentation.

• Support governance through Architecture Review Boards and Design Authorities.

• Perform solution assurance and technical design reviews across supplier deliveries.

• Identify technical risks, assumptions, constraints and dependencies.

• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.

• Work with Product Owners to refine technical requirements and delivery priorities.

• Support engineering teams throughout implementation, testing and production readiness.

• Mentor engineers and promote engineering best practice.

• Evaluate new technologies and vendor products against programme requirements.

• Contribute to roadmap planning and future-state architecture.

​

Essential Skills

• Enterprise Solution Architecture

• Identity and Access Management (IAM)

• Authentication and Authorisation

• Zero Trust Architecture

• Agent Identity and Workload Identity

• Identity Federation (OIDC, OAuth2, SAML, SCIM)

• Cloud Architecture (GCP)

• Kubernetes and Service Mesh

• API Architecture and Security

• Event-driven Architecture

• Policy-as-Code (OPA/Cedar)

• PKI, Certificates and Secrets Management

• DevSecOps and CI/CD

• High Availability and Resilience Design

• Security Architecture

• Architecture Governance

• Stakeholder Management

• Technical Leadership