IAM Solution Architect / Design SME – Zero Trust & Cloud Identity

We are looking for an experienced and motivated IAM Solution Architect / Design SME – Zero Trust & Cloud Identity to support Project Orbit – NextGen, a global Identity and Access Management transformation programme.

The successful candidate will provide end-to-end engineering and technical design leadership for the IDAM 2.0 programme, translating business, security, regulatory, and operational requirements into secure, scalable, resilient, and supportable identity solutions.

Department

Identity and Access Management (IAM)

Job Description

Responsibilities

• Produce High-Level Designs and Low-Level Designs for enterprise identity capabilities.
• Define end-to-end technical solutions across business, application, data, infrastructure, and security domains.
• Translate business, security, regulatory, and non-functional requirements into practical technical solutions.
• Develop reference architectures, reusable patterns, design standards, and technical guidance for the IAM programme.
• Define integration patterns between identity platforms, applications, infrastructure, and third-party services.
• Design cloud-native identity and security solutions using Google Cloud Platform and Kubernetes.
• Define authentication, authorization, federation, and identity lifecycle architectures.
• Design capabilities for human identity, non-human identity, agent identity, and workload identity.
• Define Zero Trust architectures, trust boundaries, and identity-first security principles.
• Design API security, service-to-service authentication, workload authentication, and secure integration patterns.
• Develop event-driven integration architectures using messaging, asynchronous processing, and distributed services.
• Design Policy Decision Point and Policy Enforcement Point architectures using Policy-as-Code, OPA, or Cedar.
• Define secrets management, certificate lifecycle, PKI, and certificate-based authentication patterns.
• Design high-availability, disaster-recovery, resilience, scalability, performance, and observability architectures.
• Produce Architecture Decision Records, design documentation, technical options, and solution assurance materials.
• Support Architecture Review Boards, Design Authorities, technical steering groups, and governance forums.
• Review and assure technical designs delivered by internal teams, implementation partners, and third-party suppliers.
• Identify and manage technical risks, assumptions, constraints, dependencies, and design deviations.
• Collaborate with Enterprise Architecture to ensure alignment with the strategic target architecture.
• Work with Product Owners to refine technical requirements, product priorities, and delivery outcomes.
• Support engineering teams throughout implementation, testing, deployment, and production readiness.
• Mentor engineers and promote secure engineering, DevSecOps, documentation, and architecture best practices.
• Evaluate new technologies and vendor products against programme requirements.
• Contribute to roadmap planning and future-state IAM architecture.