Skip to content

CBSbutler Holdings Limited trading as CBSbutler

NewBe an early applicant

IAM Design SME (Zero Trust & Cloud Architecture)

Posted 9 views
Discussion
Find people

Summary

Contract IAM Design SME (6-month rolling, £540/day) on a major UK bank's identity transformation programme: writing HLDs/LLDs for Zero Trust, federation (OIDC/OAuth2/SAML/SCIM), GCP/Kubernetes/service mesh, Policy-as-Code, PKI and secrets management. Hybrid — three days per week onsite in Sheffield.

Salary: £? - ? per year

Requirements:
  • Strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture.
  • Enterprise Architecture and Identity & Access Management (IAM) experience.
  • Experience with authentication, authorisation, federation, OIDC, OAuth2, SAML and SCIM.
  • Knowledge of Zero Trust, Agent Identity and Workload Identity.
  • Experience with GCP, Kubernetes, service mesh and cloud architecture.
  • Experience with API security, event-driven architecture and Policy-as-Code (OPA/Cedar).
  • Knowledge of PKI, certificates, secrets management and DevSecOps/CI/CD.
  • Experience with high availability, resilience and security architecture.
  • Experience with architecture governance, stakeholder engagement and technical leadership.
Responsibilities:
  • Produce end-to-end High-Level and Low-Level Designs (HLDs/LLDs).
  • Define IAM architecture across Human, Agent and Workload Identity.
  • Design Zero Trust, authentication, authorisation and federation solutions.
  • Develop cloud-native architectures across GCP, Kubernetes and service mesh environments.
  • Define secure API, service-to-service authentication and event-driven integration patterns.
  • Design Policy-as-Code, PKI, certificate lifecycle and secrets management solutions.
  • Drive architecture governance, design assurance and technical decision-making across multiple workstreams.
  • Work with architects, engineering teams and senior stakeholders to deliver production-ready solutions.
  • Take technical ownership of identity architecture and translate security, business and regulatory requirements into robust, scalable and supportable designs.
Technologies:
  • API
  • CI/CD
  • Cloud
  • DevSecOps
  • GCP
  • IAM
  • Kubernetes
  • SAML
  • Security
  • Architect

More:

We are seeking an IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management capabilities. This high-impact role offers technical influence over how identity services are designed, integrated and delivered across a complex global enterprise. The contract is six months, rolling, at £540 per day, with three days per week in Sheffield.

last updated 45 week of 2026

Skills

Apply