IAM Architect

TALENT INTERNATIONAL UK LTD; Swindon; On-site; GBP 41,000 - 68,000; Full time

Job summary

TALENT INTERNATIONAL UK LTD is seeking a senior IAM architect to lead a large-scale identity transformation in a UK hybrid contract role. You will define enterprise identity architecture aligned to ISO 24760 and Zero Trust principles, shaping the security fabric for networks, devices, applications and data.

The role covers IGA, AM, PAM, CIAM and non-human identities, with modern authentication standards and phased migration from legacy systems. Hybrid UK-based, IR35 considerations apply.

Qualifications

• Senior technical leader with demonstrable success delivering large-scale IAM transformations across complex environments.
• Deep understanding of ISO 24760 and Zero Trust Architecture principles, including reference architectures and policy-driven, risk-based access decisions.
• Proven design experience across IGA, AM, PAM, CIAM, and Non-Human Identity frameworks.
• Hands-on architecture experience with Microsoft Entra ID, AWS Cognito, specialized IGA/PAM engines, and ideally Gov.UK OneLogin.
• Familiarity with OIDC, SAML, FIDO2, WebAuthn, and SCIM.
• Understanding of identity assurance levels such as IALs and AALs.
• Track record designing low-disruption transition architectures retiring legacy systems while maintaining security and business continuity.
• Exceptional stakeholder management bridging technical teams, security leads, and senior executives.

Responsibilities

• Define a coherent enterprise identity architecture aligned to ISO 24760 standards.
• Ensure strict separation of Identity Authority, Relying Parties, and Verification Services.
• Evaluate existing service integrations across Zero Trust frameworks and least-privilege principles.
• Design modern, scalable IAM architectures covering IGA and JML, authentication and access management, PAM, verification and CIAM, and machine/non-human identities.
• Create end-to-end automated identity lifecycle processes, including policy-driven access, SCIM integration, and data quality assurance.
• Design adaptive, risk-based access controls, phishing-resistant MFA, passwordless patterns, and session management.
• Define just-in-time access, segregation of duties, and least-privilege administrative controls for privileged access.
• Design customer and citizen identity management aligned with government verification platforms and assurance standards.
• Establish lifecycle governance for service accounts, keys, and certificates.
• Design secure, standards-based identity integration patterns for federation with partners and third parties.
• Map a phased migration strategy from legacy services, including replacement of ideiio.
• Drive Year 1 focus on core IGA and AM controls and Year 2 expansion to PAM, CIAM, and full automation.

Skills

IAM

Zero Trust

IGA

AM

PAM

CIAM

Non-Human Identity

OIDC

SAML

FIDO2

WebAuthn

SCIM

ISO 24760

Stakeholder management

Tools

Microsoft Entra ID

AWS Cognito

IGA engines

OneLogin

Job description

Salary: £38,000 - 68,000 per year

Requirements

• We need a senior technical leader with demonstrable success delivering large-scale IAM transformations across complex, federated environments.
• We need deep understanding of ISO 24760 and Zero Trust Architecture principles, including standard reference architectures and policy-driven, risk-based access decisions.
• We need proven design experience across IGA, AM, PAM, CIAM, and Non-Human Identity frameworks.
• We need hands-on architecture experience with Microsoft Entra ID, AWS Cognito, specialized IGA/PAM engines, and ideally HMG Gov.UK OneLogin.
• We need familiarity with modern authentication protocols and standards including OIDC, SAML, FIDO2, WebAuthn, and SCIM.
• We need understanding of identity assurance levels such as IALs and AALs.
• We need a track record in designing low-disruption transition architectures that retire legacy systems while maintaining security and business continuity.
• We need exceptional stakeholder management skills and the ability to bridge technical teams, security leads, and senior business executives.

Responsibilities

• We will define a coherent enterprise identity architecture aligned to ISO 24760 standards.
• We will ensure strict separation of Identity Authority, Relying Parties, and Verification Services.
• We will evaluate existing service integrations across Zero Trust frameworks, least-privilege principles, and security assurance requirements.
• We will design modern, scalable IAM architectures covering IGA and JML, authentication and access management, PAM, verification and CIAM, and machine and non-human identities.
• We will create end-to-end automated identity lifecycle processes, including policy-driven access, SCIM integration, and data quality assurance.
• We will design adaptive, risk-based access controls, phishing-resistant MFA, passwordless patterns, and session management.
• We will define just-in-time access, segregation of duties, and least-privilege administrative controls for privileged access.
• We will design customer and citizen identity management aligned with HMG verification platforms and GPG45 assurance standards.
• We will establish life cycle governance for service accounts, keys, and certificates.
• We will design secure, standards-based identity integration patterns for federation with associate bodies, suppliers, and third parties.
• We will map a phased migration strategy from legacy services, including replacement of ideiio.
• We will drive a Year 1 focus on core IGA and AM controls and a Year 2 expansion to PAM, CIAM, and full automation.

Technologies

• AWS
• Fabric
• IAM
• SAML
• Security
• Cloud
• Architect

More

We are a major, high-profile public sector and enterprise transformation organization partnering on a landmark identity transformation programme. This is a hybrid UK-based contract role inside IR35, initially for 6 to 9 months with a strategic two-year roadmap. We are building a future-fit, Zero Trust-aligned identity architecture that places identity at the centre of security for networks, devices, applications, and data. This is a high-visibility opportunity to lead the technical vision for greenfield enterprise-wide IAM transformation and help shape a passwordless, scalable identity fabric from the ground up.

last updated 33 week of 2026