TEKsystems
Hashicorp SME
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Hashicorp Architect – Identity & Access Management (IAM)
Location
Manchester or Sheffield
Type
Contract
Day Rate
Inside IR35
Join a Major Cyber Security Transformation Programme
Are you an experienced Design Engineer, Security Architect, or IAM Specialist looking to make a significant impact within a large-scale cyber security and identity transformation initiative?
We are seeking a talented Cyber Security Architect to lead the design of enterprise Identity & Access Management (IAM) and Secrets Management solutions across a complex, highly regulated environment. This role offers the opportunity to influence strategic security direction, shape architecture standards, and deliver innovative solutions that support modern identity services at scale.
The Opportunity
As a Design Engineer, you will own the end-to-end solution design process, producing architecture artefacts and ensuring solutions align with business requirements, architectural principles, security standards, and long-term technology strategy.
You'll work closely with architects, engineers, programme teams, and senior stakeholders to develop solutions that are secure, scalable, resilient, and operationally supportable. Alongside delivering high-quality designs, you will help shape future architecture patterns, influence strategic decisions, and provide technical leadership across key programmes.
This is an excellent opportunity for someone who enjoys operating at the intersection of architecture, cyber security, and enterprise transformation.
Key Responsibilities
Architecture & Solution Design
- Design and deliver end-to-end technology solutions aligned to business and security requirements.
- Produce and maintain High-Level Designs (HLDs) and supporting architecture documentation.
- Develop and publish architecture patterns, design decisions, and technical standards.
- Translate complex business requirements into robust technical solutions.
- Identify and manage technical risks, issues, and dependencies throughout the project lifecycle.
- Ensure solutions balance security, cost, scalability, resilience, and operational supportability.
- Maintain strong documentation standards and architectural governance.
Governance & Stakeholder Management
- Present solution designs and recommendations to design authorities and governance boards.
- Collaborate with senior business and technology stakeholders to gain alignment and approval.
- Ensure architectural artefacts undergo appropriate review, challenge, and approval processes.
- Support project governance activities and design assurance reviews.
Risk & Dependency Management
- Identify, assess, and mitigate technical risks and design challenges.
- Define remediation plans and strategic recommendations.
- Clearly articulate the impact of design decisions and associated risks.
- Manage architecture dependencies across multiple projects and delivery teams.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Technical Leadership
- Act as a subject matter expert across cyber security and identity domains.
- Provide technical direction to architects, engineers, and analysts.
- Contribute to wider transformation initiatives and strategic planning activities.
- Influence the future direction of security architecture and engineering practices.
What We're Looking For
Cyber Security Expertise
You will bring strong technical experience in one or more of the following areas:
- Identity & Access Management (IAM)
- Security Operations & Incident Response
- Cloud Security
- Infrastructure Security
- Application Security
- Data Security
- Network Security
- Vulnerability Management
- Cryptography
You should also possess:
- Broad technology experience across enterprise IT environments.
- Strong understanding of security architecture, risk management, and governance principles.
- Experience operating within large-scale transformation programmes.
- Knowledge of security regulations, industry standards, and compliance requirements.
- Ability to communicate complex security concepts to both technical and non-technical audiences.
Identity & Access Management Experience
We are particularly interested in candidates who have experience with:
- Enterprise Secrets Management platforms.
- Privileged Access Management (PAM).
- Workload Identity and Machine Identity solutions.
- Federated Identity and Single Sign-On (SSO).
- Authentication and Authorisation frameworks.
- Enterprise IAM architecture and strategy.
Essential Technical Skills
- 3+ years' experience with HashiCorp Vault, ideally within on-premise environments.
- Strong experience integrating applications and platforms with Vault.
- Deep understanding of:
- Vault Secret Engines
- Authentication Methods
- Secrets Consumption Patterns
- 3+ years' experience using Terraform.
- Proven experience designing and developing reusable Terraform modules.
- Experience designing and implementing Workload Identity frameworks.
- Ability to define and influence enterprise-wide secrets management strategies.
- Expertise in authentication protocols including:
- OAuth
- SAML
- Kerberos
- Strong troubleshooting and root cause analysis capabilities.
Qualifications
Preferred
- Degree in Cyber Security, Computer Science, Software Engineering, or a related discipline.
- CISSP, CISM, or equivalent cyber security certification.
- TOGAF, SABSA, or similar architecture certification.
- Additional cloud or identity-related certifications are advantageous.
Technology & Tools
- HashiCorp Vault
- Terraform
- Jira
- Confluence
- IAM Platforms
- PAM Solutions
- Authentication & Federation Technologies
- Enterprise Architecture Frameworks
Why Apply?
This is an opportunity to join a high-profile cyber security transformation programme where you'll shape the future of identity, secrets management, and enterprise security architecture. You'll work alongside experienced architects and security leaders while influencing strategic decisions that impact a complex global organisation.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
If you're passionate about cyber security architecture, IAM, and solving large-scale technical challenges, we'd love to hear from you.
Keywords: Cyber Security Design Engineer, Security Architect, IAM Architect, Identity & Access Management, HashiCorp Vault, Terraform, Privileged Access Management, Secrets Management, Workload Identity, Security Architecture, OAuth, SAML, Kerberos, Enterprise Security, Financial Services.
Job Title
Hashicorp SME
Location
Manchester, UK
Rate/Salary
500.00 - 650.00 GBP Daily
Job Type
Contract
Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands.
If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.
To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.
We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London