Lead IAM Technical Architect

Russell Tobin; Swindon; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

Russell Tobin is seeking an experienced Lead IAM Technical Architect for a remote-capable role, with travel to Swindon. You will design a future-fit enterprise IAM architecture, strengthen identity governance and lifecycle management, and align with Zero Trust principles.

Key responsibilities include defining target IAM architecture across IGA, AM, PAM and CIAM, and developing modern authentication patterns such as MFA and passwordless options.

Qualifications

• Extensive IAM and enterprise architecture experience in complex organisations.
• Deep IGA expertise with architecture and implementation across lifecycle, provisioning and governance.
• Solid knowledge of enterprise IAM across IGA, AM, PAM and CIAM.
• Strong understanding of Zero Trust and identity-driven security principles.
• Experience delivering identity lifecycle management, JML, automated provisioning and access governance.
• Familiarity with modern authentication standards and assurance levels.

Responsibilities

• Define target enterprise IAM architecture across IGA, AM, PAM, CIAM and non-human identity.
• Assess current IAM landscape against target state and Zero Trust principles.
• Design IGA capabilities including JML, provisioning, access reviews and deprovisioning.
• Develop authentication patterns: MFA, passwordless, Conditional Access, risk-based access.
• Define secure identity integration, federation and trust models.
• Create transition and migration architectures to target IAM.
• Produce phased IAM roadmap from discovery to rollout.
• Engage stakeholders to establish architecture direction and governance.
• Demonstrate extensive IAM architecture experience in large organisations.
• Work within UK Government/public-sector contexts and Gov.OneLogin knowledge.

Skills

IGA architecture

Zero Trust

MFA

Just-in-time access

JML processes

Tools

Microsoft Entra ID

AWS Cognito

IGA platforms

Job description

Lead IAM Technical Architect - Remote Opportunity

Location: Remote, with occasional travel to Swindon

IR35: Inside IR35

Security Clearance: BPSS

Start: ASAP

Role Overview

We are seeking an experienced Lead IAM Technical Architect to support a strategic identity transformation programme. The role will focus on designing a future-fit enterprise IAM architecture, strengthening identity governance and lifecycle management, and establishing identity as a core security control aligned with Zero Trust Architecture principles.

Key Responsibilities

• Define and develop the target enterprise IAM architecture across IGA, AM, PAM, CIAM, identity verification and non-human identity management.
• Assess current IAM architecture, services, integrations, risks and gaps against target-state requirements and Zero Trust principles.
• Design robust Identity Governance & Administration (IGA) capabilities, including Joiner-Mover-Leaver (JML), provisioning, access reviews, deprovisioning, governance and audit controls.
• Develop modern authentication and access management patterns, including MFA, passwordless authentication, Conditional Access and risk-based access controls.
• Design privileged access controls incorporating least privilege, segregation of duties and just-in-time access.
• Define secure identity integration, federation and trust models across enterprise and third-party environments.
• Develop transition and migration architectures from existing IAM services to the target architecture.
• Produce a phased IAM implementation roadmap covering discovery, Alpha and wider rollout.
• Work closely with senior business, security, technical and supplier stakeholders to establish architecture, governance and technical direction.
• Extensive experience as an IAM Technical/Enterprise Architect within complex organisations.
• Deep Identity Governance & Administration (IGA) experience is essential – candidates should clearly demonstrate detailed IGA architecture and implementation experience within their CV.
• Strong understanding of enterprise IAM architecture across IGA, AM, PAM, CIAM, identity verification and non-human/machine identity.
• Strong knowledge of Zero Trust Architecture and identity-driven security principles.
• Proven experience designing identity lifecycle management, JML, automated provisioning, access governance and identity data quality controls.
• Strong understanding of authentication, authorisation, modern authentication standards and assurance levels.
• Experience with identity platforms such as Microsoft Entra ID, AWS Cognito and IGA platforms.
• Proven experience in IAM integration, federation and migration architecture.
• Strong understanding of least privilege, segregation of duties, risk-based access and privileged identity controls.
• Excellent stakeholder engagement and technical leadership skills.
• Experience within UK Government or public-sector environments.
• Knowledge of HMG identity verification platforms and Gov.OneLogin.
• Experience working with ISO 24760 identity architecture principles.