IAM Solutions Architect – Zero Trust & MFA (On-site)

BAE Systems; Frimley; On-site; GBP 40,000 - 70,000; Full time

Job summary

BAE Systems, assigned to the Edgewing joint venture in Reading, seeks an IAM architect to design and evolve identity solutions aligning with business and security goals. The role emphasizes secure access, MFA, SSO, PKI, and integration with enterprise apps and APIs.

Collaborating with Enterprise Architects, Cyber Security specialists and Product Owners, you will guide engineering through design, build and deployment while advocating Zero Trust and scalable governance across on-site operations.

Qualifications

• Experience in Solution Architecture, Identity and Access Management or Cyber Security environments.
• Experience designing, implementing and evolving enterprise-scale Identity and Access Management solutions.
• Knowledge of Zero Trust Architecture principles, encryption, digital certificates and Public Key Infrastructure (PKI).
• Experience implementing Multi-Factor Authentication (MFA) and Single Sign-On (SSO) solutions.
• Experience with directory services such as Active Directory, Azure AD and LDAP, including integration with IAM platforms.

Responsibilities

• Design and evolve Identity and Access Management solutions that align with business objectives and technology strategies.
• Define and maintain IAM policies, standards and architectural principles to support secure and consistent access management.
• Ensure IAM solutions are effectively integrated with enterprise applications, APIs, platforms and third-party services.
• Support the implementation of authentication, authorisation, identity governance and access control capabilities.
• Provide architectural guidance to engineering and operations teams throughout design, build and deployment activities.
• Work closely with Product Owners, Cyber Security specialists and Enterprise Architects to ensure IAM solutions meet functional and non-functional requirements.

Skills

IAM environments

Zero Trust Architecture

MFA/SO

Directory services (AD, Azure AD, LDAP

PKI

Security

Job description

BAE Systems, assigned to the Edgewing joint venture in Reading, seeks an IAM architect to design and evolve identity solutions aligning with business and security goals. The role emphasizes secure access, MFA, SSO, PKI, and integration with enterprise apps and APIs.

Collaborating with Enterprise Architects, Cyber Security specialists and Product Owners, you will guide engineering through design, build and deployment while advocating Zero Trust and scalable governance across on-site operations.