IAM Architect: Cyber Risk & Cloud Security Leader

We are seeking experienced Identity and Access Management (IAM) professionals with a strong background in architecture and engineering. The ideal candidate will support the design, implementation, testing, operation, and maintenance of IAM solutions for our clients.

Support the definition of IAM use cases, functional and non-functional solution requirements, and technical specifications, such as those for user authentication, access control, integration, performance and scalability requirements and specifications.

Support designing IAM solutions by creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards (e.g., NIST). For example, this includes:

• Creating high-level and low-level system architecture diagrams with technical descriptions of each component.
• Defining the dependencies to implement the solution, e.g., network rules, server resources, storage requirements.
• Defining the system specifications to support optimal performance.
• Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure.
• Defining the RACI matrix to operate and maintain the solution’s infrastructure components.

Support the development of technical documentation for IAM implementations including process documentation to enable operation of the solution e.g., defining processes which cover user onboarding, access requests, identity governance, approval workflows, authentication workflows, provisioning/deprovisioning tasks.

Support implementing IAM solutions:

• Install solution components in on-premise environments where relevant, or configure cloud components (and script/coding plug-ins/extensions for cloud solutions).
• Work with IT infrastructure teams to ensure pre-requisites and dependencies have been met and are in place.
• Integrate IAM solutions with existing enterprise applications/systems such as directories, cloud applications, HR systems and third-party identity providers.

Support the execution of unit, integration, functional and non-functional testing for IAM solutions. As part of this, troubleshoot and resolve issues (e.g., authentication failures, access policy conflicts, user provisioning errors) by working with vendors.

Support the delivery of services post-implementation, from hyper‑care support, resolving additional issues in production through advanced troubleshooting and debugging to ensure smooth operation.

Conduct knowledge transfer to client IAM teams through technical training sessions on operating and maintaining the solution, empowering clients to effectively manage and support the IAM environment.

Whilst a bachelor’s degree (or equivalent) in Computer Science or Engineering is desirable, we are more interested in your real‑world professional experience and your ability to turn this into impactful client outcomes.

Key Skills

Key skills – not every candidate requires all of these but should be familiar and/or have experience with a majority of these.

Technical Skills

• Broad enterprise identity experience across Enterprise and Customer Authentication, with demonstrable ability to build identity strategies which integrate into client enterprise architectures and beyond.
• Experience in working with IGA, PAM, AM, AD and CIAM solutions such as SailPoint, Saviynt, etc.
• Experience working in a digital transformation environment supporting the definition of Identity architecture leveraging cloud native and/or other IAM solutions.
• Advanced, practical experience of cloud hosting services including Amazon Web Services, Microsoft Azure, Google Cloud Platform.
• Hands‑on experience of Microsoft Active Directory/Azure AD Domain Services, Federation Services, Certificate Services, DNS and DHCP.
• Understanding of decentralised identity, verifiable credentials, microservices and Trust over IP architecture stack.

Additional Technical Skills

• Understanding of malware and the modern threat landscape.
• Relevant certifications (e.g., CIAM, CISSP, CAMS, etc.).
• Exposure to/Understanding of DevOps tools and repositories (e.g., Git, Azure Dev Ops, Kubernetes, Docker, Jenkins, Ansible, etc.).
• Role based access control (RBAC) design.
• Practical experience with Linux operating systems.
• Experience with Modern Authentication concepts e.g. Self‑Service Identity, Bring your own Identity, SCIM, SAML, WS‑Federation, OAuth, Open ID Connect.

Soft Skills

• Experience with waterfall and agile type methodologies, often working within client specified frameworks.
• Managing junior team members across a mix of locations, cultures, and experience levels.
• Detail oriented and strong problem‑solving skills.
• Excellent oral and written communication skills including concisely communicating status and creating customer reports and presentations.