At a Glance
- Tasks: Lead identity architecture and design for cutting-edge security solutions.
- Company: Join Wipro, a global leader in tech services and consulting.
- Benefits: Competitive pay, flexible working, and opportunities for professional growth.
- Other info: Dynamic work environment with a focus on digital transformation.
- Why this job: Make a real impact in cybersecurity while working with innovative technologies.
- Qualifications: 12+ years in Identity & Access Management architecture required.
The predicted salary is between 48000 - 72000 £ per year.
Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients' most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses.
Location: Coventry - Hybrid
Role Purpose
The Senior IDAM Architect is the end to end technical authority for all Identity Pillar scope under Lot 1, accountable for Initiate, Discovery, Design, and Implementation across Identity Governance & Administration (IGA), Active Directory/Entra ID, RBAC/ABAC, PKI, Conditional Access, Identity Lifecycle, CIEM, and identity threat protection capabilities. This role acts as the single technical point of contact for all identity related decisions, integrations, designs, and technical escalations, ensuring adherence to Zero Trust principles, Client Delivery & Cyber frameworks, and the architectural governance process.
Key Responsibilities
- Programme-Level Identity Architecture Leadership: Serve as the lead architect for all identity capabilities: IGA, directories (AD/OT AD/Entra ID), RBAC/ABAC, Conditional Access, PKI, CIEM, machine identity, identity lifecycle automation. Own the architectural strategy and roadmap for the Identity Pillar across Year 1 (I&D) and influence Year 2 planning. Act as the single technical authority across all identity workstreams, ensuring coherence, interoperability, and alignment with Zero Trust Identity outcomes. Lead technical governance engagement: Information Security TAG, PESA approvals, Design Authority reviews, and cross pillar integration sessions.
- Initiate & Discovery Responsibilities (Identity Specific): Lead comprehensive DAAS discovery for identity components: identity stores and directories; AD forests/domains and OT AD footprint; application identity models; entitlements, access patterns, privileged roles; IGA process and connector readiness; non human / service identities. Conduct identity specific discovery across: JML processes, access request flows, attestation cycles; directory security posture (CIS benchmarks, Microsoft best practices); account discovery (human, service, machine) across IT, OT, cloud, SaaS, air gapped systems. Evaluate and document: identity risks; excessive privileges; identity lifecycle issues; unmanaged accounts; access policy gaps. Produce: discovery logs; dependency registers; technical constraints; discovery outputs traceable to future designs.
- Identity Architecture Design Responsibilities: Produce HL/ML/LLD for the IGA platform (SailPoint/Saviynt/etc.). Define architecture for lifecycle automation (Joiner/Mover/Leaver); access request & approval workflows; entitlements management; attestation & certification; role mining & identity analytics. Define integration patterns with HR (authoritative source); AD/OT AD/Entra ID; ServiceNow; SIEM for identity related detections; PAM/PIM for privileged identities. Produce architecture for AD, Entra ID, and OT AD identity capabilities: secure configuration baselines; naming conventions, OU design, GPO strategy; trust boundaries, domain/forest design; identity lifecycle & sync patterns; directory-tiering strategy (Tier 0). Define enterprise RBAC/ABAC models: business roles, application roles, segregation of duties, governance and lifecycle of roles; ensure alignment with HR data models and IGA role mining outputs. Architect conditional access policies (CA rules, sign in risk, device trust, session controls); Define MFA strategy: Authenticator App, FIDO2, passwordless, biometrics; Define Zero Trust authentication patterns for privileged identities, third parties, mobile/remote users, OT identities where applicable. Produce architecture for PKI, certificate issuance, renewal, and lifecycle governance; Define trust anchors and certificate policies for user identities, device identities, service principals, OT and cloud workloads. Define cloud identity entitlement patterns (Azure/AWS); Establish least privilege, JIT/JEA patterns for cloud workloads.
- Implementation Responsibilities (Identity-Focused): Provide hands on architectural oversight to ensure implementations follow approved designs. Oversee rollout and validation of: IGA connectors, workflows, lifecycle processes; AD/Entra ID configuration updates and hardening; Conditional access/MFA/policy rollout; RBAC role deployment and attestation setup; PKI enhancements, CA templates, certificate workflows; CIEM configuration and governance. Guide identity engineers and application onboarding teams through technical sequencing, integration steps, and issue resolution. Validate end to end identity flows (authentication, provisioning, deprovisioning, attestation).
- Identity Governance, Compliance & Risk: Ensure all identity designs align with Zero Trust Identity requirements; CAF/eCAF outcomes; regulatory and compliance frameworks (GDPR, NIS R, PCI DSS). Define governance processes for privileged identity control; identity data quality; access attestation; policy exceptions. Support the audit and compliance teams with identity reporting, evidence, and control design.
- Stakeholder & Technical Leadership: Act as the single point of contact for all identity related technical matters across the programme. Lead communication with Cyber Architecture, HR, IT Ops, Security Operations, Application teams, OT Identity & OT Engineering teams. Conduct design walkthroughs, knowledge handovers, and training sessions for BAU teams. Resolve identity related escalations, engineering blockers, and architecture decision disputes.
Skills & Experience Requirements (Identity Scope)
- Technical Expertise: 12+ years in Identity & Access Management architecture. Deep expertise in: IGA (SailPoint/Saviynt), RBAC/ABAC; AD/Entra ID/OT AD; Authentication/Federation (SAML, OAuth2, OIDC); Conditional Access & MFA; PKI & Certificate Lifecycle; CIEM, cloud identity & Zero Trust identity patterns. Extensive experience designing and integrating identity capabilities across hybrid (IT/OT) landscapes.
- Delivery & Architecture: Proven experience delivering large-scale IAM transformations end to end. Strong architectural documentation and governance skills. Ability to lead multi vendor and multi platform identity delivery teams.
- Behavioural: Executive-level communication and architectural leadership. Operates confidently across strategic, detailed technical, and operational domains. Structured, methodical, collaborative, and outcome driven.
Deliverables:
- Identity DAAS Discovery Reports
- Requirements (Functional & Non Functional)
- High/Mid/Low-Level Identity Designs
- IGA Architecture, Connector Designs & Workflow Specifications
- Directory Services Architecture Pack
- RBAC/ABAC Role Taxonomy & Governance Framework
- Conditional Access & MFA Design Pack
- PKI Architecture & Lifecycle Model
- Identity Implementation Playbooks
- Governance, Controls & Attestation Designs
- Technical submissions for TAG/PESA/Design Authority
Mandatory Skills: SailPoint Identity Now.
We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry.
SECURITY ARCHITECT L1(CONTRACT) in Coventry employer: Wipro Limited
Wipro Limited is an exceptional employer that fosters a dynamic work culture in Brighton, England, where innovation and collaboration thrive. Employees benefit from comprehensive training programs and career advancement opportunities, ensuring personal and professional growth in the rapidly evolving field of cybersecurity. With a commitment to employee well-being and a focus on cutting-edge technology, Wipro offers a rewarding environment for those looking to make a meaningful impact in AI-driven cyber detection and response.
StudySmarter Expert Advice🤫
We think this is how you could land SECURITY ARCHITECT L1(CONTRACT) in Coventry
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Wipro Limited, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Wipro Limited
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Wipro Limited. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace SECURITY ARCHITECT L1(CONTRACT) in Coventry
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Wipro Limited insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Wipro Limited that you’re committed to staying ahead in the game.
How to prepare for a job interview at Wipro Limited
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Wipro Limited to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Wipro Limited.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
