Principal Solution Architect: Agentic IAM & AI Security

Intellias; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Intellias is seeking a principal-level engineer/architect to design and ship IaC-driven, self-service identity patterns across a large financial estate. You will define the agentic security model, including containerised execution and scoped permissions, and lead near-shore development to deliver secure, scalable solutions.

You will transition the estate from long-lived secrets to ephemeral, risk-scored credentials issued via JWT/OIDC, and work with client stakeholders to present trade-offs and

Qualifications

• 8+ years in security architecture and/or platform engineering with production code.
• Deep, mechanical command of OIDC / OAuth2 / JWT — token issuance, claims, delegation.
• Hands-on HashiCorp Vault experience with dynamic/short-lived secrets.
• Keycloak policy modelling, ideally with Terraform-driven config.
• Strong Terraform / IaC fluency for self-service patterns.
• Working knowledge of Active Directory + Entra, LDAP-backed mapping.
• Experience leading a team of engineers, including near-shore or distributed teams.
• Credible in front of a customer: run design sessions, explain trade-offs to non-specialists.
• A self-starter who can define a plan from vague problems and execute it.

Responsibilities

• Design and ship IaC-driven, self-service identity patterns across the firm.
• Define the undefined agentic runtime security model: containerised execution, permission delegation, MCP tool access.
• Lead transition from long-lived secrets toward ephemeral, time-based credentials (JWT/OIDC).
• Layer LLM/guardrails on top of the security model across the estate.
• Establish onboarding standards (MCP interfaces) to drive adoption and developer experience.
• Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows.
• Centralise audit logs to satisfy security and regulatory requirements.
• Lead near-shore engineering team and provide technical direction across time zones.
• Serve as senior technical voice with client, running design sessions and translating ambiguous asks into deliverables.

Skills

Security architecture

Identity & access management (IAM)

OIDC / OAuth2 / JWT

HashiCorp Vault

Keycloak policy modelling

Terraform / IaC

Active Directory / Entra

Leadership of near-shore teams

Client-facing/ design sessions

Self-starter/problem solving

Tools

HashiCorp Vault

Keycloak

Terraform

Active Directory

Job description

Intellias is seeking a principal-level engineer/architect to design and ship IaC-driven, self-service identity patterns across a large financial estate. You will define the agentic security model, including containerised execution and scoped permissions, and lead near-shore development to deliver secure, scalable solutions.

You will transition the estate from long-lived secrets to ephemeral, risk-scored credentials issued via JWT/OIDC, and work with client stakeholders to present trade-offs and