IAM Design Architect – Zero Trust & Cloud (Hybrid)

Experis; Sheffield; Hybrid; GBP 140,000 - 160,000; Full time

Job summary

Experis in Sheffield is seeking a Cyber Design SME to lead IAM design for a major transformation. You will produce HLDs/LLDs and define end-to-end technical solutions across business, application, data and infrastructure.

The role requires translating security and regulatory requirements into secure identity services and mentoring engineers. The position covers cloud-native design for GCP and Kubernetes, Zero Trust, API security, and policy-driven architectures, with a hybrid onsite work

Qualifications

• Experience delivering IAM in large, global organisations.
• Ability to translate security and regulatory requirements into designs.
• Proven track record defining target architectures and patterns.

Responsibilities

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
• Define end-to-end Technical Solutions across business, application, data and infrastructure domains.
• Translate requirements into technical solutions with security focus.
• Develop reference architectures, patterns and design standards.
• Define integration patterns between identity platforms and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and federation architectures.
• Design Zero Trust security architecture and trust boundaries.
• Design API security and service-to-service authentication patterns.
• Develop event-driven integration architectures using messaging.

Skills

Enterprise Architecture

IAM

Authentication & Authorization

Zero Trust Architecture

Identity Federation

Cloud Architecture (GCP)

Kubernetes

API Security

Tools

GCP

Kubernetes

OPA/Cedar

OIDC/OAuth2

SAML

SCIM

Policy-as-Code

Job description

Experis in Sheffield is seeking a Cyber Design SME to lead IAM design for a major transformation. You will produce HLDs/LLDs and define end-to-end technical solutions across business, application, data and infrastructure.

The role requires translating security and regulatory requirements into secure identity services and mentoring engineers. The position covers cloud-native design for GCP and Kubernetes, Zero Trust, API security, and policy-driven architectures, with a hybrid onsite work