At a Glance
- Tasks: Design secure data-sharing infrastructure and lead security policy enforcement.
- Company: Join a major public-sector organisation driving digital transformation.
- Benefits: Competitive daily rate, remote work, and impactful projects.
- Other info: Opportunity for growth in a dynamic, innovative environment.
- Why this job: Shape the future of secure data management and make a real difference.
- Qualifications: Experience in security architecture and knowledge of IAM and cloud security.
The predicted salary is between 60000 - 80000 £ per year.
We are seeking an experienced Security Architect (Identity and Access Management Specialist) to support the delivery of a secure, scalable and interoperable data-sharing infrastructure that allows organisations in different sectors to manage and exchange information securely while maintaining control over their own data.
Working across multiple workstreams, you will be responsible for leading the design of security, identity and policy enforcement capabilities, focusing on federated identity, Attribute-Based Access Control (ABAC), policy-as-code and secure data discovery and access. You will be working closely with architects, governance leads, developers and stakeholders, translating business, risk and policy requirements into secure, scalable and practical technical solutions.
This role is supporting a major public-sector organisation delivering a large-scale digital transformation programme - replacing legacy systems with a modern, integrated solution that will significantly enhance operational capability across critical services.
Skills and Experience:- Proven security architecture experience on complex federated enterprise solutions.
- Strong knowledge of federated identity, trust frameworks (e.g. Zero Trust) and IAM.
- Strong understanding of cloud, API and distributed system security.
- Practical experience with OAuth2, OpenID Connect, SAML and SCIM.
- Practical experience designing ABAC and policy-based access control solutions.
- Practical experience with Open Policy Agent and policy-as-code solutions at scale.
- Practical experience HMG security assurance (e.g. NCSC Cyber Assessment Framework).
- Ability to produce high-quality architecture and security design documentation.
- Ability to translate complex security concepts for technical and non-technical audiences.
- Comfortable working with ambiguity and shaping emerging requirements.
- Experience with federated data-sharing platforms or data ecosystems.
- Ontologies, semantic data models or knowledge graphs.
- Public sector, regulated industry, critical infrastructure or federated ecosystem solutions.
- Design security Non-Functional Requirements.
- Lead on service wide threat modelling.
- Define and implement ABAC and policy-as-code approaches using Open Policy Agent.
- Define patterns for discovery, access requests, policy enforcement and auditability.
- Design integration with identity providers, IAM platforms and node-level services.
- Support testing, validation and pilot activities to ensure consistent policy enforcement.
NB: The successful candidate will be required to undergo a basic level of security clearance before undertaking the assignment (around two weeks’ lead-time).
Security Architect employer: ISR Recruitment
As a leading player in the public sector digital transformation space, we offer an exceptional work environment for Quality Assurance Engineers looking to make a meaningful impact. Our remote working model allows for flexibility while collaborating with a multidisciplinary Agile team dedicated to delivering high-quality digital services. With a strong focus on employee growth and development, we provide opportunities to enhance your skills in cloud-based data platforms and contribute to significant government projects.
