IDAM Architect - DV Cleared - Perm

Sanderson Government & Defence; Farnborough; On-site; GBP 70,000 - 85,000; Full time

Benefits offered by this job

Benefits

Job summary

Sanderson Government & Defence is seeking an experienced IDAM Architect (DV cleared) in Farnborough to design enterprise-grade identity and access solutions for defence programs. You will shape authentication, authorisation and governance frameworks, drive modernisation, and ensure MOD-aligned security and regulatory compliance.

You will lead strategic IDAM design across AD/Azure AD, Okta, Ping, and ForgeRock, guiding security, risk assessments and cross‑functional collaboration with customers

Qualifications

• Minimum 12 years in identity and access management with 5+ years in architecture.
• Proven experience designing enterprise-scale IDAM solutions for defence/government.
• Deep expertise with Azure AD, Okta, Ping, ForgeRock and related tech.
• Strong background in MOD compliance, security controls and governance.

Responsibilities

• Design enterprise-scale IDAM architectures for defence operations.
• Lead modernisation programs and vendor evaluations for IDAM solutions.
• Define RBAC/ABAC and PAM strategies and governance models.
• Ensure compliance with MOD Classification Guides and ITAR.
• Provide architectural mentorship to technical teams and stakeholders.

Skills

IDAM expertise

Security architecture

Stakeholder engagement

Defence/government IAM

Leadership & mentoring

Tools

Azure AD

Okta

Ping

ForgeRock

LDAP/AD

OAuth

SAML

OpenID Connect

Job description

IDAM Architect - DV Cleared

• Location: Farnborough, Hampshire, UK
• Employment Type: Permanent, Full-Time
• Security Clearance: Developed Vetting (DV) - Essential
• Salary: £70,000 - £85,000 + Benefits

About the Role

The IDAM (Identity, Access and Data Management) Architect designs, governs and implements enterprise-scale identity and access management solutions for defence and aerospace environments. You will architect secure authentication, authorisation and identity governance frameworks, lead IDAM modernisation programmes, and ensure compliance with stringent defence security and regulatory requirements. This role demands deep expertise in identity platforms, security architecture and MOD-compliant IDAM design.

Key Responsibilities

IDAM Architecture & Strategy

• Design enterprise-scale identity and access management architectures supporting defence operations
• Architect secure authentication, multi-factor authentication (MFA) and authorisation frameworks
• Design role-based access control (RBAC), attribute-based access control (ABAC) and privilege access management (PAM) solutions
• Develop identity governance, access lifecycle management and entitlement management strategies
• Lead IDAM technology evaluation and vendor selection processes

Security & Compliance

• Ensure IDAM architectures comply with MOD Classification Guides, Defence Security Policy and ITAR regulations
• Design identity solutions supporting defence contractor personnel vetting (PRF) requirements
• Architect data protection and encryption strategies aligned with defence security standards
• Lead security risk assessments for IDAM systems and vulnerabilities
• Design audit and logging capabilities supporting MOD compliance and forensic requirements

IDAM Modernisation & Implementation

• Lead design and implementation of modern IDAM platforms (AD/Azure AD, Okta, Ping, ForgeRock)
• Design cloud-ready and hybrid identity solutions supporting multi-cloud environments
• Guide API-driven identity architecture and microservices-based identity solutions
• Lead IDAM system migrations and technology modernisation programmes

Technical Leadership & Governance

• Lead IDAM technical teams and provide architectural mentoring
• Establish IDAM design standards, architecture patterns and operational governance
• Drive technical decision-making through IDAM design reviews
• Document IDAM architecture decisions and design specifications

Integration & Operations

• Design IDAM integration with enterprise applications, systems and cloud platforms
• Architect identity federation, single sign-on (SSO) and cross-domain authentication
• Support IDAM operational readiness, performance monitoring and incident response
• Establish IDAM lifecycle management and continuous improvement processes

Customer & Stakeholder Engagement

• Serve as technical authority for IDAM architecture discussions with customer leadership
• Present identity and access management recommendations to defence programme teams
• Lead IDAM design workshops and customer validation activities

Essential Requirements

Experience & Expertise

• Minimum 12 years' identity and access management experience with 5+ years in architecture role
• Proven experience designing enterprise-scale IDAM solutions
• Strong background in defence, aerospace or government IDAM programmes
• Demonstrated expertise with modern identity platforms (Azure AD, Okta, Ping, ForgeRock)
• Track record of leading IDAM modernisation and technology transformation programmes

Technical Knowledge

• Deep expertise in IDAM architecture patterns, methodologies and best practices
• Expert-level knowledge of identity technologies including LDAP, Active Directory, OAuth, SAML and OpenID Connect
• Strong understanding of Azure AD, Office 365 identity, hybrid identity and cloud-native identity solutions
• Proficiency in privilege access management (PAM), role/attribute-based access control (RBAC/ABAC)
• Knowledge of identity governance, access certification and entitlement management
• Expertise in API security, service-to-service authentication and microservices identity
• Familiarity with MOD security requirements, Classification Guides and defence compliance
• Understanding of cryptography, encryption and security protocols

Personal Attributes

• Exceptional strategic thinking with strong technical depth
• Outstanding communication and stakeholder engagement skills
• Strong problem-solving and analytical capabilities
• Proven ability to lead technical teams and influence senior stakeholders
• Commitment to security and compliance excellence

Desirable Requirements

• Experience with defence or aerospace IDAM programmes
• CISSP, CISM or equivalent security certifications
• Azure AD or Okta advanced certifications
• Experience with identity-driven security and zero-trust architecture
• Knowledge of ITAR compliance and export controls

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.