IAM Design SME (Zero Trust & Cloud Architecture)

CBSbutler Holdings Limited trading as CBSbutler; Sheffield; On-site; GBP 96,000 - 103,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking an IAM Design SME to lead end-to-end identity architecture across Zero Trust and cloud-native environments. You will define secure, scalable IAM solutions for a major banking transformation, including design governance and collaboration with senior stakeholders.

The role focuses on producing HLDs/LLDs, policy-as-code, PKI and secrets management, with hands-on work across GCP, Kubernetes and service mesh architectures in a large

Qualifications

• Enterprise-level IAM or security architecture design experience.

Responsibilities

• Produce end-to-end High-Level and Low-Level Designs (HLDs/LLDs).
• Define IAM architecture across Human, Agent and Workload Identity.
• Design Zero Trust, authentication, authorisation and federation solutions.
• Develop cloud-native architectures across GCP, Kubernetes and service mesh environments.
• Define secure API, service-to-service authentication and event-driven integration patterns.
• Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions.
• Driving architecture governance, design assurance and technical decision-making across multiple workstreams.
• Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions.

Skills

IAM Design

Zero Trust

Cloud Architecture

GCP

Kubernetes

OIDC

OAuth2

SAML

SCIM

Policy-as-Code

PKI

CI/CD

DevSecOps

Secrets management

Tools

OPA

Cedar

Job description

Job title: IAM Design SME (Zero Trust & Cloud Architecture)

Rate: 540 per day

Location: Sheffield – 3 days per week
Contract: 6 months rolling

We're looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next–generation Identity and Access Management (IAM) capabilities.

This is a high–impact opportunity to take technical ownership of identity architecture, define secure cloud–native solutions and influence how identity services are designed, integrated and delivered across a complex global enterprise. You'll act as a technical authority across the programme, translating complex security, business and regulatory requirements into robust, scalable and supportable designs.

You’ll be responsible for:

• Producing end–to–end High–Level and Low–Level Designs (HLDs/LLDs).
• Defining IAM architecture across Human, Agent and Workload Identity.
• Designing Zero Trust, authentication, authorisation and federation solutions.
• Developing cloud–native architectures across GCP, Kubernetes and service mesh environments.
• Defining secure API, service–to–service authentication and event–driven integration patterns.
• Designing Policy–as–Code, PKI, certificate lifecycle and secrets management solutions.
• Driving architecture governance, design assurance and technical decision–making across multiple workstreams.
• Working closely with architects, engineering teams and senior stakeholders to deliver production–ready solutions.

Expereince:

We're looking for someone with strong enterprise–level design experience and a proven track record delivering complex IAM or security architecture.

Key experience includes:

• Enterprise Architecture and Identity & Access Management (IAM).
• Authentication, authorisation, federation and OIDC, OAuth2, SAML and SCIM.
• Zero Trust, Agent Identity and Workload Identity.
• GCP, Kubernetes, service mesh and cloud architecture.
• API security, event–driven architecture and Policy–as–Code (OPA/Cedar).
• PKI, certificates, secrets management and DevSecOps/CI/CD.
• High availability, resilience and security architecture.
• Architecture governance, stakeholder engagement and technical leadership.