Role Title: IAM Security Architect
Duration: contract to run until 26/02/2027
Location: London/Brighton/Staines. Hybrid working 3 days per week onsite
Rate: up to £644 p/d Umbrella inside IR35
Role Purpose / Summary
The Identity & Access Architect is responsible for defining, designing, and governing enterprise-wide Identity and Access Management (IAM) solutions across Microsoft Azure, Microsoft Entra ID, Google Cloud Platform (GCP) and Saas Platform such as Salesforce, Oracle Health Insurance , and PeopleSoft
The role provides technical leadership for identity architecture, authentication, authorization, privileged access management, federation, secrets management, token lifecycle governance, and DevSecOps identity controls. The architect will establish secure, scalable, and compliant identity patterns for users, applications, workloads, APIs, automation platforms, and CI/CD pipelines while supporting a Zero Trust security model.
The successful candidate will serve as the subject matter expert for cloud identity, access governance, workload authentication, and token management across hybrid and multi-cloud environments for human and also agentic access requirements.
Key Responsibilities
Identity Architecture & Strategy
- Define and maintain the enterprise IAM strategy and roadmap.
- Design secure identity architectures across Azure, Entra ID, GCP , SaaS platform
- Design User access management for human, Agentic applications and API’s
- Develop identity governance standards, patterns, and reference architectures.
- Ensure alignment with Zero Trust principles and cloud security best practices.
- Lead the design of hybrid identity and cloud-native authentication solutions.
- Provide architecture guidance for new applications, platforms, and services.
Authentication & Federation
Design And Implement Enterprise Authentication And Federation Services Including:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Passwordless Authentication
- Federation Services
- Identity Trust Relationships
Protocols And Technologies:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- SCIM
- WS-Federation
- Kerberos
- LDAP
#J-18808-Ljbffr…