At a Glance
- Tasks: Lead the design of secure identity solutions across cloud platforms and manage access governance.
- Company: Dynamic tech firm focused on innovative IAM solutions in a hybrid work environment.
- Benefits: Competitive daily rate, flexible working, and opportunities for professional growth.
- Other info: Exciting contract role with potential for long-term impact in a fast-paced environment.
- Why this job: Join a cutting-edge team shaping the future of identity management in the cloud.
- Qualifications: Experience in IAM architecture and cloud security principles required.
The predicted salary is between 60000 - 75000 £ per year.
Duration
contract to run until 26/02/2027
Location
London/Brighton/Staines. Hybrid working 3 days per week onsite
Rate
up to £644 p/d Umbrellainside IR35
The Identity & Access Architect is responsible for defining, designing, and governing enterprise-wide Identity and Access Management (IAM) solutions across Microsoft Azure, Microsoft Entra ID, Google Cloud Platform (GCP) and Saas Platform such as Salesforce, Oracle Health Insurance , and People Soft
The role provides technical leadership for identity architecture, authentication, authorization, privileged access management, federation, secrets management, token lifecycle governance, and Dev Sec Ops identity controls.
The architect will establish secure, scalable, and compliant identity patterns for users, applications, workloads, APIs, automation platforms, and CI/CD pipelines while supporting a Zero Trust security model.
The successful candidate will serve as the subject matter expert for cloud identity, access governance, workload authentication, and token management across hybrid and multi-cloud environments for human and also agentic access requirements.
Key Responsibilities
- Identity Architecture & Strategy
- Define and maintain the enterprise IAM strategy and roadmap.
- Design secure identity architectures across Azure, Entra ID, GCP , Saa S platform
- Design User access management for human, Agentic applications and API’s
- Develop identity governance standards, patterns, and reference architectures.
- Ensure alignment with Zero Trust principles and cloud security best practices.
- Lead the design of hybrid identity and cloud-native authentication solutions.
- Provide architecture guidance for new applications, platforms, and services.
- Design and implement enterprise authentication and federation services including
- Single Sign-On (SSO)
- Passwordless Authentication
- Identity Trust Relationships
- Protocols and technologies
- OAuth 2.0
- Open ID Connect (OIDC)
- SCIM
- LDAP
Responsibilities include
- Federation between Microsoft Entra ID and GCP.
- Integration with Saa S and third-party identity providers.
- B2B and B2C identity solutions.
- Cross-cloud trust establishment.
- API authentication architecture.
Act as the enterprise authority for token lifecycle management.
- OAuth Access Tokens
- PAT (Personal Access Tokens)
- API Access Tokens
Responsibilities
- Establish token lifespan and expiry policies.
- Implement token monitoring and auditing.
- Govern token signing and certificate management.
- Prevent token leakage and abuse.
- Establish short-lived token standards across cloud platforms.
- Security Principles
- Zero Trust verification
- Continuous validation of identity
- Secrets, Certificates & Key Management
Design and govern enterprise secret management capabilities.
- Managed Identities
- Entra Workload Identities
- Certificate Management
- Customer Managed Encryption Keys (CMEK)
- Workload Identity Federation
- Service Accounts
Responsibilities
- Automated secret rotation.
- Elimination of hard-coded credentials.
- Secure storage and retrieval controls.
- Auditable access to sensitive credentials.
- Secrets management standards across cloud platforms.
- Privileged Access Management (PAM)
- Design and govern privileged access solutions including
- Microsoft Entra Privileged Identity Management (PIM)
- Just-In-Time Access
- Just Enough Administration (JEA)
Responsibilities include
- Privileged role governance.
- Privileged access reviews.
- Break-glass account management.
- Segregation of duties controls.
All profiles will be reviewed against the required skills and experience.
Due to the high number of applications we will only be able to respond to successful applicants in the first instance.
We thank you for your interest and the time taken to apply!
#J-18808-Ljbffr
IAM Security Architect employer: Undisclosed
Experis is an exceptional employer, offering a dynamic work environment in London or Manchester where collaboration and innovation thrive. With a strong focus on employee growth, we provide comprehensive benefits including a contributory pension programme, medical and dental cover, and generous holiday allowances, ensuring our team members feel valued and supported in their professional journey.
StudySmarter Expert Advice🤫
We think this is how you could land IAM Security Architect
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Undisclosed.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Undisclosed.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Undisclosed.
We think you need these skills to ace IAM Security Architect
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Undisclosed a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Undisclosed; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Undisclosed.
How to prepare for a job interview at Undisclosed
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Undisclosed for the IAM Security Architect, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Undisclosed.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the IAM Security Architect role at Undisclosed.
