Remote IAM Security Architect for Enterprise Identity

Dev/Null Security; Sheffield; Remote; GBP 90,000 - 130,000; Full time

Job summary

Dev/Null Security is seeking a Security Architect with a strong engineering background to lead IAM design across large, complex environments. You will own solution designs, translate business requirements into architectures, and support engineers through implementation and handover.

The role covers workforce, privileged and non-human identities, including service accounts and cloud workloads. You will present recommendations at design authorities and with senior stakeholders.

Qualifications

• Significant IAM/security/platform engineering expertise in enterprise environments.
• Experience designing and delivering enterprise identity solutions.
• Strong knowledge of authentication, federation, provisioning, IGA and PAM.

Responsibilities

• Design secure, scalable identity services across cloud, SaaS, and on‑prem environments.
• Define authentication, SSO, federation, MFA patterns aligned to risk.
• Automate identity lifecycles, access requests, approvals and reviews.
• Define privileged access controls including just‑in‑time access and credential management.
• Prototype integrations with engineers and validate designs through proofs of concept.

Skills

IAM design

Security architecture

Platform engineering

Authentication & Federation

OAuth 2.0 / OIDC / SAML / SCIM

RBAC / ABAC / least privilege

Cloud identity services

Kubernetes / microservices

SPIFFE / SPIRE workload identities

Automation via APIs / IaC

Security governance & design reviews

Communication with stakeholders

Education

Relevant degree or equivalent practical experience

Security certifications desirable (CISSP/CISM/SABSA/TOGAF)

Tools

Kubernetes

Job description

Dev/Null Security is seeking a Security Architect with a strong engineering background to lead IAM design across large, complex environments. You will own solution designs, translate business requirements into architectures, and support engineers through implementation and handover.

The role covers workforce, privileged and non-human identities, including service accounts and cloud workloads. You will present recommendations at design authorities and with senior stakeholders.