Senior Infrastructure Architect - Identity and Access Management (IAM/IDAM)

Salary: £78,000-£84,000 dependent on skills, knowledge & experience. Including excellent benefits such as free travel across TfL services, Final Salary Pension and 30 days annual leave.

Location: North Greenwich, London - Hybrid Working 50% Office attendance model

Application closing date: Tuesday 22nd September 2026 at 23.59

UK Sponsorship Unavailable

As a Senior Infrastructure Architect in the Hosting and Infrastructure Architecture team at TfL you'll be at the heart of major projects and programmes of work that continually improve the travel experience in London. Recent examples of major initiatives the team have been involved in are enhancing Cyber Security through improvements in our Identity and Access Management systems. The team has also delivered transformations to our customer facing services like End User Computing, Revenue Collection and internal systems that keep our business running, such as a Microsoft 365, Entra ID and Document Management Systems that keep our fleets moving across the London Underground, Elizabeth Line and Surface transport. You will develop new solutions in Public and Private Cloud to deliver these and many more key initiatives.

What You’ll be doing

• You’ll be responsible for the end-to-end lifecycle of specific infrastructure products – from conceptualisation and business case development, right the way through to shaping achievable strategies and roadmaps.
• You’ll be supported by Project Managers, Business Analysts, Development Solution Architects and Test Teams to explore high and low-level designs, before seeing your solutions successfully deployed and put into operation.
• You will also work in partnership with third-party suppliers, seeing to it that their proposed solutions meet business and technical requirements.

Knowledge and Experience

We are looking for someone with expert knowledge across at least 3 of the following infrastructure technologies:

• Directory & Identity Management: Deep conceptual understanding of multi-forest Active Directory (AD), Microsoft Entra ID (formerly Azure AD), LDAP, and hybrid directory synchronization models.
• Endpoint Management and Application Delivery via Microsoft Intune and/or SCCM.
• Enterprise Security (e.g. IDS/IPS, Encryption, PKI).
• Cloud platforms, including their features and capabilities with providers such as Azure and AWS.
• Hyper Converged Infrastructure and Virtual Storage Attached Networking.
• Networking and connectivity (e.g. TCP/IP, DNS, VPNs, proxies, load balancing).
• Enterprise Operating Systems and Databases (e.g. Windows Server, RedHat Enterprise Linux, Oracle DBEE, SQL Server).

It would be advantageous that you can also demonstrate knowledge of the following:

• Additional network technologies (e.g. firewalls, switching and routing) and network architecture.
• Managing contractual issues in a project environment.
• Project management tools and techniques.
• Certification in an Enterprise Architecture Framework such as TOGAF.

The ideal candidate would also be educated to degree level or possess relevant professional experience.

In Addition To Being Skilled In

• Strong infrastructure architecture skills in architecting technology components across software, infrastructure and networks.
• Ability to take a loose set of requirements and build a high-level architecture using common standards.
• Proven ability to analyse complex components, identify decision points, draw conclusions and produce design artefacts.
• Ability to communicate effectively, both orally and in writing, with people within a broad group of stakeholders including project managers, business analysts, developers, engineers and testers.
• Experience of designing and delivering systems using industry standard frameworks and open standards.
• Ability to work independently and as part of a team.
• Delivery focused with the ability to effectively prioritise tasks in a high-pressure environment to drive activities forward and meet demanding deadlines.

Excellent Benefits include:

• Final salary pension scheme.
• Free travel for you on the TfL network.
• Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket.
• 30 days annual leave plus public and bank holidays.
• TfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow.
• Tax-efficient cycle-to-work programme.
• Retail, health, leisure and travel offers.
• Discounted Eurostar travel and much more!

If you are shortlisted you may be invited to take part in a Video interview. We endeavour to give candidates as much notice as possible however some interviews/ assessments will be organised at short notice and will require a degree of flexibility. We reserve the right to close the application window early if we receive a high volume of suitable applications.

Equality, diversity and inclusion

We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible.

As a Disability Confident Leader, we actively encourage applications from disabled people. As part of the Disability Confident scheme, we aim to offer an assessment or interview to candidates who apply via the scheme where the minimum essential criteria for skills, knowledge and experience has been met.

In some circumstances, it may not be practical to offer an interview or assessment to every candidate who applies through the scheme and meets the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.

Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly, consistently and proportionately in line with our Disability Confident commitments.

We also use anonymising software that removes identifying information from CVs and cover letters to make the process fair. Many of our staff work flexibly in many different ways. Please talk to us at interview about the flexibility you need. We'll see what we can do.

We understand a confidence gap can get in the way of meeting spectacular candidates. So please don’t hesitate to apply if you think you have what it takes even if you feel you don’t meet all the criteria. We’d love to hear from you.

At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn’t match or can’t be verified, we may not be able to move forward with your application but we’ll always treat you with transparency, respect and clear communication throughout.