Iam Solution Architect

HelloKindred; England; Hybride; GBP 120 000 - 180 000; Plein temps

Résumé du poste

HelloKindred in the United Kingdom is seeking a Cyber Design SME to lead the enterprise IAM transformation. You will define target architecture, deliver end-to-end designs, and guide multiple workstreams across identity services within complex environments.

You will translate business, security, and regulatory requirements into robust technical solutions, mentor engineers, and collaborate with IAM architects, stakeholders and partners to drive modern identity capabilities and secure, scalable

Qualifications

• Extensive experience in enterprise architecture and technical design.
• Proven IAM expertise including identity services and lifecycle management.
• Strong knowledge of authentication, authorisation and identity federation protocols (OIDC, OAuth 2.0, SAML, SCIM).
• Experience designing Zero Trust security architectures and trust boundaries.

Responsabilités

• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for identity capabilities.
• Define end-to-end technical solutions across business, application, data and infrastructure domains.
• Translate requirements into secure, scalable technical solutions and patterns.
• Develop reference architectures and design standards for the programme.
• Define integration patterns between identity platforms, applications and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and identity federation architectures.
• Design Agent, Human and Workload Identity capabilities, and Zero Trust controls.

Connaissances

IAM Expertise

Enterprise Architecture

Zero Trust

GCP

Kubernetes

API Security

Policy‑as‑Code

DevSecOps

Stakeholder Mgmt

Outils

OPA

Cedar

Kubernetes

Description du poste

Job Description

Anticipated Contract End Date/Length: December 20, 2026
Work Set Up: Hybrid (3 days per week in office, 2 days remote)

Our client in the Information Technology and Services industry is looking for an Cyber Design SME to provide technical leadership for an enterprise IAM transformation programme. This role will define target architecture and deliver end-to-end technical designs for secure, scalable, and supportable identity services across complex enterprise environments.

The successful candidate will translate business, security, and regulatory requirements into technical solutions, ensuring architectural consistency, integration, and alignment with enterprise strategy. Working closely with IAM architects, business stakeholders, product owners, and technology partners, this individual will guide multiple workstreams, support engineering teams, and drive the adoption of modern identity and access management capabilities.

Responsibilities

• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for identity capabilities.
• Define end-to-end technical solutions across business, application, data, and infrastructure domains.
• Translate business, security, and regulatory requirements into secure, scalable, and supportable technical solutions.
• Develop reference architectures, reusable patterns, and design standards for the programme.
• Define integration patterns between identity platforms, applications, and infrastructure.
• Design cloud-native solutions for Google Cloud Platform (GCP) and Kubernetes environments.
• Define authentication, authorisation, and identity federation architectures.
• Design Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust security architecture, trust boundaries, and security controls.
• Design API security, service-to-service authentication, and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle, and Public Key Infrastructure (PKI) integration patterns.
• Design high availability, resilience, and disaster recovery architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience, and performance.
• Produce architecture decision records (ADRs) and comprehensive technical design documentation.
• Support architectural governance through Architecture Review Boards and Design Authorities.
• Conduct solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints, and dependencies.
• Collaborate with Enterprise Architecture to maintain alignment with strategic architecture and target-state objectives.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing, and production readiness.
• Mentor engineers and promote technical excellence and engineering best practices.
• Evaluate emerging technologies and vendor products against programme requirements.
• Contribute to roadmap planning and the evolution of future‑state architecture.

Qualifications

• Extensive experience in enterprise architecture and technical design within complex, global organisations.
• Strong expertise in Identity and Access Management (IAM), including enterprise identity services and identity lifecycle capabilities.
• Proven understanding of authentication, authorisation, and identity federation protocols, including OIDC, OAuth 2.0, SAML, and SCIM.
• Demonstrated experience designing Zero Trust security architectures and defining trust boundaries.
• Knowledge of Agent Identity, Human Identity, and Workload Identity architectures.
• Experience with cloud architecture, particularly Google Cloud Platform (GCP).
• Strong understanding of Kubernetes, cloud‑native environments, and service mesh architectures.
• Expertise in API architecture and security, including service‑to‑service and workload authentication.
• Experience designing event‑driven architectures using messaging and asynchronous processing.
• Familiarity with Policy‑as‑Code frameworks, such as Open Policy Agent (OPA) and Cedar.
• Knowledge of PKI, certificate lifecycle management, and secrets management.
• Experience with DevSecOps practices and CI/CD integration.
• Proven ability to design high availability, disaster recovery, and resilient solutions that meet enterprise non‑functional requirements.
• Strong background in security architecture, architectural governance, and design assurance.
• Experience producing HLDs, LLDs, architecture decision records, and technical design documentation.
• Demonstrated ability to assess technical risks, dependencies, and solution constraints across multiple workstreams.
• Strong stakeholder management skills, with the ability to collaborate across Enterprise Architecture, engineering teams, Product Owners, business stakeholders, and technology partners.
• Proven technical leadership experience, including mentoring engineers, guiding implementation, and promoting engineering best practices.
• Ability to evaluate technologies and vendor solutions, contribute to architectural roadmaps, and maintain alignment with enterprise target‑state architecture.

Additional Information

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role‑related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.