IAM Design SME (Zero Trust & Cloud Architecture)

Salary: £140,400 - 140,400 per year

Requirements:

• Strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture
• Enterprise architecture and Identity and Access Management (IAM) experience
• Knowledge of authentication, authorisation, federation, OIDC, OAuth2, SAML and SCIM
• Experience with Zero Trust, Agent Identity and Workload Identity
• Experience with GCP, Kubernetes, service mesh and cloud architecture
• Knowledge of API security, event-driven architecture and Policy-as-Code (OPA/Cedar)
• Experience with PKI, certificates, secrets management and DevSecOps/CI/CD
• Knowledge of high availability, resilience and security architecture
• Experience in architecture governance, stakeholder engagement and technical leadership

Responsibilities:

• Produce end-to-end High-Level and Low-Level Designs (HLDs/LLDs)
• Define IAM architecture across Human, Agent and Workload Identity
• Design Zero Trust, authentication, authorisation and federation solutions
• Develop cloud-native architectures across GCP, Kubernetes and service mesh environments
• Define secure API, service-to-service authentication and event-driven integration patterns
• Design Policy-as-Code, PKI, certificate lifecycle and secrets management solutions
• Drive architecture governance, design assurance and technical decision-making across multiple workstreams
• Work closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions
• Take technical ownership of identity architecture and translate security, business and regulatory requirements into robust, scalable and supportable designs

Technologies:

• API
• CI/CD
• Cloud
• DevSecOps
• GCP
• IAM
• Kubernetes
• SAML
• Security
• Architect

More:

We are hiring an IAM Design SME for a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management capabilities across a complex global enterprise. This high-impact role offers the opportunity to influence how identity services are designed, integrated and delivered. The contract is six months rolling, at a rate of £540 per day, with three days per week based in Sheffield.

last updated 43 week of 2026