IAM Cloud Security Architect

£780 PER DAY
INSIDE IR35
12 MONTH CONTRACT
UK REMOTE

Role purpose

Provide senior architecture and delivery capability across Identity & Access Management (IAM), Identity Governance and Administration (IGA), and Cloud Security, translating a complex identity and cloud-security modernisation agenda into robust target-state architectures, reusable security patterns, governance artefacts and implementation roadmaps.

Working closely with the IAM domain owner, enterprise architects, cloud/platform teams and security engineering, the architect will help drive the organisation from current-state identity and cloud controls towards a scalable, risk-based and well-governed target architecture across workforce, privileged, non-human and agentic identities.

Key responsibilities

• Define and maintain the target-state IAM and Cloud Security architecture, aligned to enterprise security strategy, regulatory requirements and technology roadmaps.
• Develop the architecture and implementation approach for IGA and access certification, including risk-based certification models, identity lifecycle governance, tooling/vendor assessment and migration strategy.
• Support the design, pilot and phased implementation of IGA / Access Certification platforms, ensuring appropriate integration with Active Directory, Entra ID, applications and privileged-access capabilities.
• Assess and architect Identity Verification (ID&V) solutions for helpdesk, self-service and identity recovery journeys, including integration with external identity-verification providers.
• Define architecture for Enterprise Password Management, including workforce identity integration, privileged access considerations and security/tooling governance.
• Develop target-state architecture for Non-Human and Machine Identity, covering service accounts, workload identities, secrets, certificates, ownership, lifecycle management and access governance.
• Define the architecture for AI and Agentic Identity Lifecycle Management, covering discovery, authentication, authorisation, identity propagation, accountability and cross-domain security controls for AI agents and machine identities.
• Develop and maintain IAM security patterns covering:
  • Non-Human Identity
  • Agentic / AI Identity
  • Federation and SSO
  • Privileged Access Management
  • Identity Propagation
  • Cross-Account Cloud Access
  • Mobile Access Credentials
  • Machine and Workload Identity
• Develop and maintain cloud security architecture patterns covering:
  • Public Cloud Landing Zones
  • Multi-Cloud Security
  • Secure Workload Deployment
  • Cloud Control Evidence
  • Third-Party Managed Compute
  • Cloud File Transfer
  • SaaS Connectivity and Ingress/Egress
• Architect secure identity integration across Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications and third-party services.
• Assess and design appropriate controls for AWS / Azure / GCP cloud environments, including identity federation, workload identity, privileged access, cross-account access and least-privilege controls.
• Support technology and vendor assessments, including evaluation of IAM, IGA, PAM, ID&V and cloud-security platforms.
• Identify architectural risks, dependencies and gaps across IAM and cloud environments and define pragmatic remediation strategies.
• Drive consistency and reuse through a controlled library of IAM and cloud-security reference patterns and standards.