Talent
IAM Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Description
Principal Enterprise IAM Architect (Zero Trust Transformation)
Position: Lead Enterprise IAM Architect
Project Duration: 6-9 Months initially
Working Model: Hybrid (UK-based)
Industry: Public Sector / Major Enterprise Transformation
Inside IR35 - £750 Per Day
Are you an expert Enterprise Identity Architect with deep Zero Trust expertise? Looking for a high-impact role where identity isn't just an IT function, but the primary security control plane?
We have partnered with a major, high-profile organization to spearhead a landmark, two-year identity transformation programme. We are seeking a visionary Principal Enterprise IAM Architect to design, establish, and oversee the rollout of a future-fit, Zero Trust-aligned identity architecture.
The Project Brief
This strategic transformation will elevate Identity and Access Management (IAM) across the entire enterprise ecosystem, establishing identity as the core security control for networks, devices, applications, and data.
You will lead the end-to-end design from current-state gap and risk analysis through to a multi-year transition architecture and phased delivery roadmap.
Key Deliverables And Responsibilities
- Target Architecture Design: Define a coherent enterprise identity architecture aligned to ISO 24760 standards, ensuring strict separation of Identity Authority, Relying Parties, and Verification Services.
- Current-State Risk Assessment: Evaluate existing service integrations (Entra ID, ideiio, AWS Cognito) across Zero Trust frameworks, least-privilege principles, and security assurance requirements.
- Core IAM Pillar Blueprinting: Design modern, scalable architectures covering:
- IGA and JML: End-to-end automated identity lifecycle (Joiner-Mover-Leaver), policy-driven access, SCIM integration, and data quality assurance.
- Authentication and AM: Adaptive, risk-based access controls (Conditional Access), phishing-resistant MFA, passwordless patterns, and session management.
- PAM: Just-in-time (JIT) access, segregation of duties, and least-privilege administrative controls.
- Verification and CIAM: Customer/citizen identity management aligned with HMG verification platforms (e.g., Gov.UK OneLogin) and GPG45 assurance standards.
- Machine and Non-Human Identities (NHI/MIM): Life cycle governance for service accounts, keys, and certificates.
- Integration Fabric and Federation: Design secure, standards-based identity integration patterns enabling seamless federation with associate bodies, suppliers, and third parties.
- Transition and Implementation Roadmap: Map out the phased migration strategy from legacy services (including ideiio replacement), driving a Year 1 focus on core IGA/AM controls and a Year 2 expansion to PAM, CIAM, and full automation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Who We Are Looking For
We are looking for a senior technical leader with demonstrable success delivering large-scale IAM transformations across complex, federated environments.
Key Technical Skills And Experience
- ISO 24760 and Zero Trust Architecture (ZTA): Deep understanding of ZTA principles and standard reference architectures, translating them into policy-driven, risk-based access decisions.
- Multi-Pillar IAM Architecture: Proven design experience across IGA, AM, PAM, CIAM, and Non-Human Identity frameworks.
- Enterprise Identity Platforms: Hands-on architecture experience with technologies such as Microsoft Entra ID, AWS Cognito, specialized IGA/PAM engines, and HMG Gov.UK OneLogin (highly desirable).
- Identity Assurance and Standards: Familiarity with modern auth protocols (OIDC, SAML, FIDO2, WebAuthn, SCIM) and identity assurance levels (IALs/AALs).
- Migration and Coexistence Design: Track record in designing low-disruption transition architectures to sunset legacy systems while maintaining security and business continuity.
- Senior Leadership and Governance: Exceptional stakeholder management skills able to bridge the gap between technical teams, security leads, and senior business executives.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why Apply?
- High-Visibility Influence: Lead the technical vision for an enterprise-wide identity transformation.
- Greenfield Architecture: Opportunity to design cutting-edge, passwordless, and Zero Trust identity fabrics from the ground up.
- Strategic Longevity: Secure, strategic 2-year project roadmap with clear, measurable outcomes.
Ready to Drive Enterprise Identity Transformation?
If you have the architectural vision and technical gravitas to lead this capability, we'd love to speak with you.
Click Apply Now with your updated CV, or connect with our Technology Recruitment Team for a confidential discussion about the role.
£700.00 - £750.00 / day
Talent International UK and its subsidiaries, Digital Gurus, Infinite Talent and Rethink act as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this opportunity, you accept the T&C's, Privacy Policy and Disclaimers which can be found at talentinternational.co.uk
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location