Design SME - IAM

Vallum Associates; Sheffield; On-site; GBP 90,000 - 120,000; Full time

Job summary

Vallum Associates is seeking a Senior Enterprise Architect to lead identity and security architecture across the programme in the UK. You will translate business, security and regulatory requirements into scalable technical designs, and define end-to-end solutions spanning business, application, data and infrastructure domains.

You will develop reference architectures, design patterns and ADRs, define integration patterns between identity platforms, and mentor engineers to promote best practices

Qualifications

• Experience leading enterprise identity and security architecture programmes.
• Strong ability to translate business and regulatory requirements into technical designs.
• Proven track record in cloud-native, IAM and Zero Trust implementations.
• Experience with GCP, Kubernetes and API security patterns.
• Familiarity with Policy-as-Code, PKI and secret management.

Responsibilities

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
• Define end-to-end Technical Solutions across business, application, data and infrastructure domains.
• Translate business, security and regulatory requirements into technical solutions.
• Develop reference architectures, patterns and design standards for the programme.
• Define integration patterns between identity platforms, applications and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and federation architectures.
• Design Agent Identity, Human Identity and Workload Identity capabilities.
• Define Zero Trust security architecture and trust boundaries.
• Design API security, service-to-service authentication and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle and PKI integration patterns.
• Design resilience, disaster recovery and high availability architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
• Produce architecture decision records (ADRs) and design documentation.
• Support governance through Architecture Review Boards and Design Authorities.
• Perform solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints and dependencies.
• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing and production readiness.
• Mentor engineers and promote engineering best practice.
• Evaluate new technologies and vendor products against programme requirements.
• Contribute to roadmap planning and future-state architecture.

Skills

Enterprise Architecture

Identity and Access Management

Authentication and Authorisation

Zero Trust Architecture

Agent Identity

Workload Identity

Identity Federation

Cloud Architecture (GCP)

Kubernetes

API Architecture & Security

Event-driven Architecture

Policy-as-Code (OPA/Cedar)

PKI & Secrets Management

DevSecOps & CI/CD

High Availability & Resilience

Security Architecture

Architecture Governance

Stakeholder Management

Technical Leadership

Roadmap & Future-state Architecture

Job description

Key Responsibilities:

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
• Define end-to-end Technical Solutions across business, application, data and infrastructure domains.
• Translate business, security and regulatory requirements into technical solutions.
• Develop reference architectures, patterns and design standards for the programme.
• Define integration patterns between identity platforms, applications and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and federation architectures.
• Design Agent Identity, Human Identity and Workload Identity capabilities.
• Define Zero Trust security architecture and trust boundaries.
• Design API security, service-to-service authentication and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle and PKI integration patterns.
• Design resilience, disaster recovery and high availability architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
• Produce architecture decision records (ADRs) and design documentation.
• Support governance through Architecture Review Boards and Design Authorities.
• Perform solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints and dependencies.
• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing and production readiness.
• Mentor engineers and promote engineering best practice.
• Evaluate new technologies and vendor products against programme requirements.
• Contribute to roadmap planning and future-state architecture.

Key Skills & Experience:

• Enterprise Architecture
• Identity and Access Management (IAM)
• Authentication and Authorisation
• Zero Trust Architecture
• Agent Identity and Workload Identity
• Identity Federation (OIDC, OAuth2, SAML, SCIM)
• Cloud Architecture (GCP)
• Kubernetes and Service Mesh
• API Architecture and Security
• Event-driven Architecture
• Policy-as-Code (OPA/Cedar)
• PKI, Certificates and Secrets Management
• DevSecOps and CI/CD
• High Availability and Resilience Design
• Security Architecture
• Architecture Governance
• Stakeholder Management
• Technical Leadership