Lead IAM Technical Architect

Location: Remote + occasional travel to Swindon

Contract: Until 31 March 2027

Rate: Up to £750/day Umbrella

IR35: Inside IR35

Clearance: BPSS

We are seeking an experienced Lead IAM Technical Architect to support a major UK public-sector identity transformation programme.

You will lead the design of a future-state enterprise IAM architecture, supporting a wider Zero Trust strategy and defining the roadmap from current to target state.

Key Responsibilities

• Define enterprise IAM target and transition architectures.
• Assess current IAM capabilities, risks, integrations and gaps.
• Lead architecture across IGA, IAM, PAM, CIAM, identity verification, federation and machine identities.
• Design identity lifecycle, JML, provisioning, deprovisioning and access governance.
• Define modern authentication, phishing-resistant MFA, passwordless and risk-based access.
• Develop IAM migration strategies and implementation roadmaps.
• Establish IAM standards, governance and technical direction.
• Work with senior stakeholders, security teams, architects and suppliers.

Essential Experience

• Strong enterprise IGA architecture experience — essential.
• Proven experience with JML, provisioning/deprovisioning, access reviews, RBAC, SoD and identity lifecycle automation.
• Enterprise IAM architecture and current/target-state design.
• Zero Trust, least privilege and risk-based access.
• Authentication, federation and identity integration.
• Experience with complex IAM migrations and legacy/modern environments.
• Strong stakeholder and technical leadership skills.

Desirable

Experience with Microsoft Entra ID, SailPoint, Saviynt, Omada, One Identity, AWS Cognito, CIAM, PAM, machine identity, UK Government identity standards and ISO 24760.

Important: Candidates must demonstrate substantial IGA and identity lifecycle experience within their CV. Access Management experience alone will not be sufficient.

Apply now if you are an experienced IAM Architect available for an ASAP start.