IDAM Architect - Secure, on-site Hampshire

Hackajob Ltd; Farnborough; On-site; GBP 70,000 - 110,000; Full time

Job summary

DXC Technology is recruiting an IDAM Architect to lead enterprise-scale identity and access management initiatives for defence and aerospace environments. You will design secure authentication, authorisation, MFA and governance frameworks, while guiding modern IDAM platforms across hybrid and cloud environments.

The role requires experience with Azure AD, Okta, Ping, and ForgeRock, plus a proven record of delivering IDAM modernisation programmes and ensuring compliance with strict security

Qualifications

• Experience in identity and access management within an architecture role.
• Proven track record designing enterprise-scale IDAM solutions.
• Strong background in defence, aerospace or government IDAM programmes.
• Expert knowledge of identity technologies including LDAP, Active Directory, OAuth, SAML and OpenID Connect.

Responsibilities

• Design enterprise-scale IDAM architectures for defence operations.
• Architect secure authentication, MFA and authorisation frameworks.
• Design RBAC, ABAC and PAM solutions.
• Develop identity governance, access lifecycle and entitlement strategies.
• Lead IDAM technology evaluations and vendor selections.
• Ensure architectures comply with Defence Security Policy and ITAR regulations.
• Lead design workshops and customer validation activities.

Skills

IDAM Expertise

Enterprise Architecture

Security Compliance

Defence/Aerospace

Azure AD

Okta

RBAC/ABAC

OAuth/SAML/OIDC

Tools

Azure AD

Okta

Ping Identity

ForgeRock

Job description

Job Description:

DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

IDAM Architect

Location: Hampshire (onsite 5 days per week)

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

The IDAM (Identity, Access and Data Management) Architect designs, governs and implements enterprise‑scale identity and access management solutions for defence and aerospace environments. You will architect secure authentication, authorisation and identity governance frameworks, lead IDAM modernisation programmes, and ensure compliance with stringent defence security and regulatory requirements.

Key Responsibilities

IDAM Architecture & Strategy

• Design enterprise-scale identity and access management architectures supporting defence operations.


• Architect secure authentication, multi-factor authentication (MFA) and authorisation frameworks.


• Design role-based access control (RBAC), attribute-based access control (ABAC) and privilege access management (PAM) solutions.


• Develop identity governance, access lifecycle management and entitlement management strategies.


• Lead IDAM technology evaluation and vendor selection processes.

Security & Compliance

• Ensure IDAM architectures comply with Classification Guides, Defence Security Policy and ITAR regulations.


• Design identity solutions supporting defence contractor personnel vetting (PRF) requirements.


• Architect data protection and encryption strategies aligned with defence security standards.


• Lead security risk assessments for IDAM systems and vulnerabilities.


• Design audit and logging capabilities supporting compliance and forensic requirements.

IDAM Modernisation & Implementation

• Lead design and implementation of modern IDAM platforms (AD/Azure AD, Okta, Ping, ForgeRock).


• Design cloud‑ready and hybrid identity solutions supporting multi‑cloud environments.


• Guide API‑driven identity architecture and microservices‑based identity solutions.


• Lead IDAM system migrations and technology modernisation programmes.

Technical Leadership & Governance

• Lead IDAM technical teams and provide architectural mentoring.


• Establish IDAM design standards, architecture patterns and operational governance.


• Drive technical decision‑making through IDAM design reviews.


• Document IDAM architecture decisions and design specifications.

Integration & Operations

• Design IDAM integration with enterprise applications, systems and cloud platforms.


• Architect identity federation, single sign‑on (SSO) and cross‑domain authentication.


• Support IDAM operational readiness, performance monitoring and incident response.


• Establish IDAM lifecycle management and continuous improvement processes.

Customer & Stakeholder Engagement

• Serve as technical authority for IDAM architecture discussions with customer leadership.


• Present identity and access management recommendations to defence programme teams.


• Lead IDAM design workshops and customer validation activities.

What You'll Bring

• Previous experience in identity and access management within a architecture role.


• Proven experience designing enterprise‑scale IDAM solutions.


• Strong background in defence, aerospace or government IDAM programmes.


• Demonstrated expertise with modern identity platforms (Azure AD, Okta, Ping, ForgeRock).


• Track record of leading IDAM modernisation and technology transformation programmes.


• Deep expertise in IDAM architecture patterns, methodologies and best practices.


• Expert‑level knowledge of identity technologies including LDAP, Active Directory, OAuth, SAML and OpenID Connect.


• Strong understanding of Azure AD, Office 365 identity, hybrid identity and cloud‑native identity solutions.


• Proficiency in privilege access management (PAM), role/attribute‑based access control (RBAC/ABAC).


• Knowledge of identity governance, access certification and entitlement management.


• Expertise in API security, service‑to‑service authentication and microservices identity.


• Understanding of cryptography, encryption and security protocols.


• Exceptional strategic thinking with strong technical depth.


• Outstanding communication and stakeholder engagement skills.


• Strong problem‑solving and analytical capabilities.


• Proven ability to lead technical teams and influence senior stakeholders.


• Commitment to security and compliance excellence.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We're committed to fostering an inclusive environment where everyone can thrive.

JBRP1_UKTJ