Design SME NextGen IAM

TESTQ Technologies; Sheffield; Presencial; GBP 90.000 - 130.000; Jornada completa

Descripción de la vacante

TESTQ Technologies is seeking an experienced Enterprise IAM Architect to provide end-to-end engineering and design leadership across identity and access management initiatives.

You will translate security requirements into scalable solutions, define HLDs/LLDs/ADR-driven architectures, and collaborate with product owners to align roadmaps with strategy.

The role requires hands-on knowledge of GCP, Kubernetes, API security, and zero-trust patterns, guiding implementation across global teams.

Formación

• Strong Enterprise Architecture Solution Architecture or Security Architecture experience.
• Deep expertise in Identity and Access Management (IAM).
• Strong knowledge of Authentication and Authorization architectures.
• Experience designing Zero Trust architectures and trust boundaries.
• Strong knowledge of Kubernetes and Service Mesh technologies.

Responsabilidades

• Provide endtoend engineering and technical design leadership across enterprise Identity and Access Management initiatives
• Produce and maintain HighLevel Designs HLDs LowLevel Designs LLDs Architecture Decision Records ADRs and supporting technical documentation
• Define endtoend technical solutions across business application data security and infrastructure domains
• Translate business security regulatory and nonfunctional requirements into secure and supportable identity solutions
• Develop reference architectures reusable patterns technical standards and design guardrails
• Define integration patterns between identity platforms applications cloud services and infrastructure components
• Design cloudnative identity solutions for GCP and Kubernetes environments
• Define authentication authorization and identity federation architectures
• Design Human Identity Agent Identity Workload Identity and NonHuman Identity capabilities
• Define Zero Trust architecture security boundaries and trust relationships
• Design API security servicetoservice authentication and workload authentication patterns
• Develop eventdriven integration architectures using messaging and asynchronous processing
• Design Policy Decision Point PDP and Policy Enforcement Point PEP architectures using PolicyasCode
• Define secrets management PKI certificate lifecycle and cryptographic integration patterns
• Design solutions for High Availability resilience scalability performance and Disaster Recovery
• Conduct solution assurance and technical design reviews across internal and supplierdelivered solutions
• Support Architecture Review Boards Design Authorities and technical governance forums
• Identify and manage technical risks assumptions constraints dependencies and design decisions
• Collaborate with Enterprise Architecture to ensure alignment with strategic and targetstate architectures
• Work with Product Owners to refine technical requirements delivery priorities and product roadmaps
• Guide engineering teams throughout implementation testing deployment and productionreadiness activities
• Mentor engineers and promote secure engineering practices technical standards and design consistency
• Evaluate emerging technologies and vendor products against programme and architectural requirements
• Contribute to roadmap planning technology strategy and futurestate architecture

Conocimientos

IAM Architecture

AuthN/AuthZ

Zero Trust

GCP

Kubernetes

API Security

Policy as Code

PKI & Secrets

DevSecOps CI/CD

Event-Driven Architecture

Herramientas

Google Cloud Platform

Kubernetes

Descripción del empleo

• Provide endtoend engineering and technical design leadership across enterprise Identity and Access Management initiatives
• Produce and maintain HighLevel Designs HLDs LowLevel Designs LLDs Architecture Decision Records ADRs and supporting technical documentation
• Define endtoend technical solutions across business application data security and infrastructure domains
• Translate business security regulatory and nonfunctional requirements into secure and supportable identity solutions
• Develop reference architectures reusable patterns technical standards and design guardrails
• Define integration patterns between identity platforms applications cloud services and infrastructure components
• Design cloudnative identity solutions for GCP and Kubernetes environments
• Define authentication authorization and identity federation architectures
• Design Human Identity Agent Identity Workload Identity and NonHuman Identity capabilities
• Define Zero Trust architecture security boundaries and trust relationships
• Design API security servicetoservice authentication and workload authentication patterns
• Develop eventdriven integration architectures using messaging and asynchronous processing
• Design Policy Decision Point PDP and Policy Enforcement Point PEP architectures using PolicyasCode
• Define secrets management PKI certificate lifecycle and cryptographic integration patterns
• Design solutions for High Availability resilience scalability performance and Disaster Recovery
• Conduct solution assurance and technical design reviews across internal and supplierdelivered solutions
• Support Architecture Review Boards Design Authorities and technical governance forums
• Identify and manage technical risks assumptions constraints dependencies and design decisions
• Collaborate with Enterprise Architecture to ensure alignment with strategic and targetstate architectures
• Work with Product Owners to refine technical requirements delivery priorities and product roadmaps
• Guide engineering teams throughout implementation testing deployment and productionreadiness activities
• Mentor engineers and promote secure engineering practices technical standards and design consistency
• Evaluate emerging technologies and vendor products against programme and architectural requirements
• Contribute to roadmap planning technology strategy and futurestate architecture

To be successful in this role you should have

• Strong Enterprise Architecture Solution Architecture or Security Architecture experience
• Deep expertise in Identity and Access Management IAM
• Strong knowledge of Authentication and Authorization architectures
• Experience designing Zero Trust architectures and trust boundaries
• Understanding of Human Identity Agent Identity Workload Identity and NonHuman Identity
• Strong experience with Identity Federation standards including OIDC OAuth2 SAML and SCIM
• Handson architecture experience with Google Cloud Platform GCP
• Strong knowledge of Kubernetes and Service Mesh technologies
• Experience designing secure APIs API Gateways and servicetoservice authentication
• Strong understanding of EventDriven Architecture messaging and asynchronous processing
• Experience with PolicyasCode technologies such as OPA and Cedar
• Strong understanding of PDP and PEP authorization architecture
• Knowledge of PKI Certificate Lifecycle Management and Secrets Management
• Experience designing DevSecOps and CICD integration patterns
• Strong knowledge of High Availability Disaster Recovery resilience scalability and performance design
• Experience creating HLDs LLDs ADRs reference architectures and design standards
• Strong Architecture Governance and Solution Assurance experience
• Ability to identify and manage technical risks dependencies constraints and assumptions
• Experience reviewing supplier designs and thirdparty technology solutions
• Strong stakeholder management and technical leadership skills
• Ability to communicate complex architecture decisions to both technical and nontechnical audiences
• Experience mentoring engineers and guiding implementation teams
• Proven experience delivering complex solutions in large global enterprise environments

3 Most Important Skills Critical for Success

• 1 Enterprise IAM Architecture including Authentication Authorization Identity Federation Human Identity Agent Identity and Workload Identity
• 2 EndtoEnd Solution Design including HLDs LLDs ADRs reference architectures technical governance and solution assurance
• 3 CloudNative Security Architecture across GCP Kubernetes API Security Zero Trust PolicyasCode PKI and Secrets Management

Skills

Mandatory Skills : Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Architecture Principle Design