IAM Design SME - Zero Trust Cloud Architect

CBSbutler Holdings Limited trading as CBSbutler; Sheffield; On-site; GBP 96,000 - 103,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking an IAM Design SME to lead end-to-end identity architecture across Zero Trust and cloud-native environments. You will define secure, scalable IAM solutions for a major banking transformation, including design governance and collaboration with senior stakeholders.

The role focuses on producing HLDs/LLDs, policy-as-code, PKI and secrets management, with hands-on work across GCP, Kubernetes and service mesh architectures in a large

Qualifications

• Enterprise-level IAM or security architecture design experience.

Responsibilities

• Produce end-to-end High-Level and Low-Level Designs (HLDs/LLDs).
• Define IAM architecture across Human, Agent and Workload Identity.
• Design Zero Trust, authentication, authorisation and federation solutions.
• Develop cloud-native architectures across GCP, Kubernetes and service mesh environments.
• Define secure API, service-to-service authentication and event-driven integration patterns.
• Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions.
• Driving architecture governance, design assurance and technical decision-making across multiple workstreams.
• Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions.

Skills

IAM Design

Zero Trust

Cloud Architecture

GCP

Kubernetes

OIDC

OAuth2

SAML

SCIM

Policy-as-Code

PKI

CI/CD

DevSecOps

Secrets management

Tools

OPA

Cedar

Job description

CBSbutler Holdings Limited trading as CBSbutler is seeking an IAM Design SME to lead end-to-end identity architecture across Zero Trust and cloud-native environments. You will define secure, scalable IAM solutions for a major banking transformation, including design governance and collaboration with senior stakeholders.

The role focuses on producing HLDs/LLDs, policy-as-code, PKI and secrets management, with hands-on work across GCP, Kubernetes and service mesh architectures in a large