Senior IAM Security Architect: Cloud & On-Prem

CloudFlare; City of Westminster; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Global offices across Americas, Europe

Challenging, collaborative environment

Job summary

CloudFlare is seeking a Senior Security Architect to design and drive the strategic direction of IAM across hybrid environments. You will partner with engineering to embed secure-by-design principles, perform threat modeling and risk assessments, and guide security controls in cloud and on‑prem data centers.

With 8+ years in information security, you will lead architecture discussions, mentor peers, and ensure regulatory alignment for financial services. Strong communication is essential.

Qualifications

• Must have 8+ years in information security with at least 4 years in security architecture.
• Deep IAM expertise with major providers and PAM/IGA platforms.
• Strong understanding of OAuth/OIDC/SAML/SCIM, Kerberos, LDAP.
• Experience building security controls in cloud and on-prem environments.
• Financial services experience and knowledge of relevant regulations.
• Proven ability to lead, mentor, and communicate with stakeholders.

Responsibilities

• Define and own IAM architecture strategy for workforce, customer, and workload identities.
• Design secure solutions using PAM, SSO, MFA, and IGA platforms.
• Architect security controls across AWS, Azure, GCP and on-premises environments.
• Partner with engineering to embed secure-by-design practices in development and CI/CD.
• Perform threat modeling, architecture reviews, and risk assessments.
• Provide technical leadership and mentorship to junior staff.
• Collaborate with GRC, SOC, and IT to align with financial services regulations.
• Evaluate new security technologies and maintain architecture standards.

Skills

8+ years information security

4+ years security architecture

IAM expertise

Okta

Azure AD/Entra ID

Ping Identity

CyberArk

SailPoint

BeyondTrust

OAuth 2.0

OIDC

SAML

SCIM

Kerberos

LDAP

AWS

Azure

GCP

on-premises data centers

financial services

network security

cryptography

zero trust architecture

secrets management

Terraform

CloudFormation

Python

PowerShell

Bash

communication

Education

Bachelor's degree in Computer Science or Information Security

CISSP

CISSP-ISSAP

SABSA

CCSP

cloud security certifications (AWS/Azure)

Tools

Okta

Azure AD/Entra ID

Ping Identity

CyberArk

SailPoint

BeyondTrust

Job description

CloudFlare is seeking a Senior Security Architect to design and drive the strategic direction of IAM across hybrid environments. You will partner with engineering to embed secure-by-design principles, perform threat modeling and risk assessments, and guide security controls in cloud and on‑prem data centers.

With 8+ years in information security, you will lead architecture discussions, mentor peers, and ensure regulatory alignment for financial services. Strong communication is essential.