IFS Cloud Security Architect: Access, RBAC & SoD Lead

Cathcart Associates Group Ltd; City Of London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Cathcart Associates Group Ltd is seeking an IFS Security Architect to own and evolve the access, permissions and security model across a large IFS Cloud transformation. The role blends architecture, hands-on delivery and governance to ensure a robust, least-privilege, audit-ready access framework across a multi-country deployment.

You will embed RBAC and SoD controls, translate business processes into scalable access models, and lead security design and governance across releases.

Qualifications

• Strong hands-on experience with IFS Cloud security configuration.
• Deep understanding of: Permissions, roles & access models in IFS.
• Aurena, projections, APIs & integrations (REST/OData).
• Segregation of Duties & RBAC frameworks.
• Experience in enterprise-scale ERP programmes.
• Exposure to controlled environments (SOx, audit, compliance).
• Solid working knowledge of SQL, APIs, and IFS Connect.

Responsibilities

• Own and evolve the IFS Cloud security architecture (roles, permission sets, data + API security).
• Embed RBAC, least privilege and SoD controls across programme delivery.
• Translate business processes into scalable access models.
• Lead security design, configuration and governance across releases and go-lives.
• Support SIT/UAT, cutover and hypercare from a security perspective.
• Partner with IT, business teams, and audit to ensure compliance (SOx/GDPR/ISO).

Skills

IFS Cloud security

RBAC & least privilege

SIT/UAT security support

Security governance

SOx/GDPR/ISO compliance

Tools

Azure DevOps

Jira

IFS Connect

SQL

REST/OData APIs

Job description

Cathcart Associates Group Ltd is seeking an IFS Security Architect to own and evolve the access, permissions and security model across a large IFS Cloud transformation. The role blends architecture, hands-on delivery and governance to ensure a robust, least-privilege, audit-ready access framework across a multi-country deployment.

You will embed RBAC and SoD controls, translate business processes into scalable access models, and lead security design and governance across releases.