At a Glance
- Tasks: Lead the design and implementation of innovative identity solutions across various domains.
- Company: Join CloudPay, a trusted global payroll partner with a vibrant culture.
- Benefits: Enjoy competitive salary, flexible work options, and wellness perks.
- Other info: Embrace a culture of empowerment and continuous improvement with excellent career growth opportunities.
- Why this job: Make a real impact in a dynamic environment focused on innovation and teamwork.
- Qualifications: Experience in IAM architecture and modern identity protocols is essential.
The predicted salary is between 60000 - 80000 £ per year.
About this job opportunity
Our Vision: To be the world's most trusted global payroll partner, simplifying pay for all employees.
Our Mission: Empowering global workforces with seamless, compliant, and innovative payroll and payment solutions, enabling businesses to thrive in a connected world.
Our People: Our fundamental beliefs at CloudPay are built on core values of professionalism, passion, empowerment, innovation, and teamwork. We value our employees and strive to create a great workplace where everyone is valued, heard, inspired, and encouraged to bring their authentic selves to work. We're committed to providing an excellent employee experience through fulfilling projects, empowerment to make a difference, and an environment that inspires innovation.
What makes this role exciting: The Solutions Architect specializes in Identity & Access Management (IAM) to lead the design and implementation of enterprise-grade identity solutions across workforce, machine-to-machine (M2M), and customer (B2B, B2C) domains. The role works in a highly cross-functional environment, bridging the gap between security, core platforms, and application teams to deliver a cohesive, future-proof identity strategy.
Main responsibilities:
- Enterprise IAM Architecture: Lead the architecture and design of enterprise IAM solutions, leveraging the Ping Identity suite.
- Authorization Modeling: Design and implement a robust RBAC model adaptable across workforce, applications, and platforms, with a clear evolutionary path toward hybrid RBAC/ABAC and Fine-Grained Authorization (FGA).
- API Security & Gateway Enforcement: Define patterns for API security and token-based access (OAuth2, OIDC, JWT). Partner closely with API Platform teams to establish standardized token validation, scoping, and mediation patterns at the API Gateway tier (e.g., Apigee, Kong).
- Machine-to-Machine (M2M) Security: Architect secure service-identity and M2M authorization models, including Client Credentials flows, service identity lifecycles, and API-to-API trust frameworks.
- Zero Trust Governance: Ensure all identity patterns align with Zero Trust principles, producing robust architectural artifacts including role hierarchies, token claims strategies, and centralized access policies.
Experience needed for this role:
- Core IAM & Authorization: Hands-on architectural experience with the Ping Identity suite. Deep understanding of modern identity protocols like: OAuth2, OIDC, SAML, and JWT architecture. Proven experience designing enterprise-wide RBAC and entitlement models spanning both users and services. Experience implementing modern authorization patterns (Modern Grant Authorization, scopes, claims-based access).
- API Security & M2M Infrastructure: Solid experience integrating IAM frameworks with API Management and Gateway platforms (Apigee, Kong, or AWS API Gateway) to enforce edge security. Deep experience with the OAuth2 Client Credentials flow, token design, workload identities, and securing service-to-service communication.
- Leadership & Governance: Strong enterprise architecture background with a design-first mindset (focusing on systemic patterns rather than just localized implementation). Proven ability to align large, diverse stakeholder groups (Security, Business Domains, App Teams, and Platform/Infra teams) and articulate complex IAM concepts in business-friendly language. Comfortable dealing with ambiguity, legacy constraints, and organizational complexity.
Nice to have, but not essential:
- Experience with Identity Governance & Administration (IGA) tools.
- Familiarity with compliance frameworks (SOX, GDPR, ISO).
- Knowledge of DevSecOps, infrastructure-as-code (IaC), and IAM automation pipelines.
- B2C experience.
- AWS Cognito experience.
About you and Our core values:
- Taking ownership, working with integrity and respect.
- Being a team player is key to our culture.
- Solution and customer focused.
- Great initiative with the goal for excellence in achieving results.
- Dedicated to developing and always looking for continuous improvements.
- Be creative, be committed, be engaged and enjoy what you do.
UK Package and benefits:
- Competitive Salary
- Competitive vacation allowance
- Calm app
- WFH Allowance
- Life Assurance
- Private Medical Insurance
- Cycle to Work Scheme
- Eye Tests & Glasses Contribution
- Simplyhealth Enhanced Health Plan
- Pension Scheme
- Give-As-You-Earn (GAYE)
- Employee Referral Program
- CloudPay NOW
- Paid Volunteering days
- Marriage Leave
- Bereavement Leave
- Vacation Purchase Plan
CloudPay is committed to being an equal opportunities employer.
StudySmarter Expert Advice🤫
We think this is how you could land IDM Solution Architect in Andover
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including CloudPay, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through CloudPay
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at CloudPay. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace IDM Solution Architect in Andover
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at CloudPay insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to CloudPay that you’re committed to staying ahead in the game.
How to prepare for a job interview at CloudPay
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at CloudPay to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at CloudPay.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
