IAM Architect

We are hiring an experienced IAM Architect with strong expertise across Identity Governance & Administration (IGA) and Privileged Access Management (PAM). The role will be responsible for defining, shaping, and governing the target-state architecture for IGA and PAM capabilities, ensuring alignment with enterprise security strategy, regulatory obligations, and business priorities. The successful candidate will play a key role in security transformation initiatives, driving robust identity governance, privileged access controls, compliance, and risk reduction across a complex regulated environment.

This role requires a strong combination of strategic architecture capability, technical domain depth, and stakeholder management across security, infrastructure, application, risk, audit, and business teams.

• Define and maintain the target-state architecture for IGA and PAM across workforce, third-party, and privileged identities.
• Lead the design of scalable and secure identity controls covering identity lifecycle management, access governance, privileged access, least privilege, and segregation of duties.
• Develop architecture principles, standards, policies, patterns, and roadmaps for IGA and PAM transformation programmes.
• Provide architectural leadership for onboarding applications, platforms, and infrastructure into IGA and PAM services.
• Design and review solutions covering joiner, mover, leaver processes, access requests, approvals, certifications, role modelling, SoD controls, privileged account vaulting, elevation, session management, and break-glass access.
• Support product and vendor evaluations, including RFP responses, technical assessments, and solution selection activities.
• Ensure all solution designs align with UK BFSI regulatory, risk, audit, and compliance expectations.
• Work closely with engineering, operations, security, and business stakeholders to ensure successful delivery and adoption of identity capabilities.
• Review current-state IAM controls, identify architectural and control gaps, and recommend improvement opportunities.
• Provide design assurance, governance, and sign-off for IGA and PAM initiatives.

• Proven experience working as an IAM Architect, Security Architect, or similar architecture role in large enterprise environments.
• Strong hands-on architectural experience across both IGA and PAM domains.
• Demonstrable experience in the Banking, Financial Services and Insurance (BFSI) sector, preferably within the UK.
• Strong understanding of identity governance principles including joiner, mover, leaver processes, access requests and approvals, access certifications and recertifications, role modelling and role-based access control, segregation of duties, and policy-based access governance.
• Strong understanding of privileged access controls including privileged account discovery, password vaulting, privileged session management, just-in-time / just-enough access, elevation and delegation controls, and break-glass access.
• Experience designing integrations across on-prem, cloud, hybrid, and SaaS environments.
• Good knowledge of identity and security protocols such as SAML, OAuth2, OpenID Connect, LDAP, SCIM, Kerberos, and API-based integrations.
• Experience working with one or more enterprise IGA and PAM solutions such as CyberArk, Delinea, BeyondTrust, One Identity PAM.

The ideal candidate will be a seasoned IAM professional with deep architecture experience across both governance-led identity controls and privileged access security. They will be comfortable operating in a complex BFSI environment, engaging senior stakeholders, and translating security, risk, and regulatory requirements into practical and scalable architecture outcomes. Lead implementation end-to-end and ensure benefits are realised.