IAM Solution Architect

Anticipated Contract End Date/Length: December 20, 2026
Work Set Up: Hybrid (3 days per week in office, 2 days remote)

Our client in the Information Technology and Services industry is looking for an Cyber Design SME to provide technical leadership for an enterprise IAM transformation programme. This role will define target architecture and deliver end-to-end technical designs for secure, scalable, and supportable identity services across complex enterprise environments.

The successful candidate will translate business, security, and regulatory requirements into technical solutions, ensuring architectural consistency, integration, and alignment with enterprise strategy. Working closely with IAM architects, business stakeholders, product owners, and technology partners, this individual will guide multiple workstreams, support engineering teams, and drive the adoption of modern identity and access management capabilities.

Responsibilities

• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for identity capabilities.
• Define end-to-end technical solutions across business, application, data, and infrastructure domains.
• Translate business, security, and regulatory requirements into secure, scalable, and supportable technical solutions.
• Develop reference architectures, reusable patterns, and design standards for the programme.
• Define integration patterns between identity platforms, applications, and infrastructure.
• Design cloud-native solutions for Google Cloud Platform (GCP) and Kubernetes environments.
• Define authentication, authorisation, and identity federation architectures.
• Design Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust security architecture, trust boundaries, and security controls.
• Design API security, service-to-service authentication, and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle, and Public Key Infrastructure (PKI) integration patterns.
• Design high availability, resilience, and disaster recovery architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience, and performance.
• Produce architecture decision records (ADRs) and comprehensive technical design documentation.
• Support architectural governance through Architecture Review Boards and Design Authorities.
• Conduct solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints, and dependencies.
• Collaborate with Enterprise Architecture to maintain alignment with strategic architecture and target-state objectives.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing, and production readiness.
• Mentor engineers and promote technical excellence and engineering best practices.
• Evaluate emerging technologies and vendor products against programme requirements.
• Contribute to roadmap planning and the evolution of future-state architecture.