Remote IAM Architect - External Identity (SC Cleared)

Eames Consulting Group; Greater London; Remote; GBP 96,000 - 165,000; Full time

Job summary

Eames Consulting Group is seeking an IAM Architect focused on external identity (CIAM) to design scalable access for non-employees. You will define the rules for registration, authentication, authorisation and lifecycle for external users, ensuring secure, scalable access.

Collaborating with security, delivery and engineering teams, you will ensure the architecture is implemented as designed and will author comprehensive documentation for wider teams.

Qualifications

• Active SC clearance (non-negotiable).
• Proven experience as an IAM architect, ideally with external identity (CIAM) at scale.
• Strong knowledge of OAuth 2.0, OpenID Connect, SAML and modern authentication patterns.
• Experience designing policy-based access models and the rules behind them.
• Hands-on familiarity with at least one major IAM platform (e.g. Entra External ID, Okta, Ping, ForgeRock).
• Comfortable talking to a security architect and a programme director.
• Ability to work independently without a daily chaser.

Responsibilities

• Defining the architecture and design principles for external identity and access.
• Shaping the rules around registration, authentication, authorisation and lifecycle for external users.
• Designing how identity proofing, assurance levels and consent fit together.
• Making sensible calls on federation, SSO and delegated access.
• Working with security, delivery and engineering teams so the design gets built as drawn.
• Writing documentation that people will read and use.
• Challenging decisions when something won’t hold up.

Skills

IAM architecture

External identity / CIAM at scale

OAuth 2.0

OpenID Connect

SAML

Federation and SSO

Policy-based access models

Tools

Entra External ID

Okta

Ping Identity

ForgeRock

Job description

Eames Consulting Group is seeking an IAM Architect focused on external identity (CIAM) to design scalable access for non-employees. You will define the rules for registration, authentication, authorisation and lifecycle for external users, ensuring secure, scalable access.

Collaborating with security, delivery and engineering teams, you will ensure the architecture is implemented as designed and will author comprehensive documentation for wider teams.