IAM Solution Architect – Design Engineer

The Role: IAM Solution Architect – Design Engineer

Location: Sheffield, UK

Position Type: Contract Inside IR35

Remote work option Available: Hybrid – 3 Days Onsite

Job Description:

Key Skills & Experience

•          Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.

•          Define end-to-end solution architecture across business, application, data and infrastructure domains.

•          Translate business, security and regulatory requirements into technical solutions.

•          Develop reference architectures, patterns and design standards for the programme.

•          Define integration patterns between identity platforms, applications and infrastructure.

•          Design cloud-native solutions for GCP and Kubernetes environments.

•          Define authentication, authorisation and federation architectures.

•          Design Agent Identity, Human Identity and Workload Identity capabilities.

•          Define Zero Trust security architecture and trust boundaries.

•          Design API security, service-to-service authentication and workload authentication patterns.

•          Develop event-driven integration architectures using messaging and asynchronous processing.

•          Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.

•          Define secrets management, certificate lifecycle and PKI integration patterns.

•          Design resilience, disaster recovery and high availability architectures.

•          Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.

•          Produce architecture decision records (ADRs) and design documentation.

•          Support governance through Architecture Review Boards and Design Authorities.

•          Perform solution assurance and technical design reviews across supplier deliveries.

•          Identify technical risks, assumptions, constraints and dependencies.

•          Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.

•          Work with Product Owners to refine technical requirements and delivery priorities.

•          Support engineering teams throughout implementation, testing and production readiness.

•          Mentor engineers and promote engineering best practice.

•          Evaluate new technologies and vendor products against programme requirements.

•          Contribute to roadmap planning and future-state architecture.

Essential Skills

• Enterprise Solution Architecture
• Identity and Access Management (IAM)
• Authentication and Authorisation
• Zero Trust Architecture
• Agent Identity and Workload Identity
• Identity Federation (OIDC, OAuth2, SAML, SCIM)
• Cloud Architecture (GCP)
• Kubernetes and Service Mesh
• API Architecture and Security
• Event-driven Architecture
• Policy-as-Code (OPA/Cedar)
• PKI, Certificates and Secrets Management
• DevSecOps and CI/CD
• High Availability and Resilience Design
• Security Architecture
• Architecture Governance
• Stakeholder Management
• Technical Leadership