Public Sector Resourcing
Lead IAM Technical Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Lead IAM Technical Architect
Role Summary
Lead IAM Technical Architect responsible for defining and delivering the enterprise identity architecture for UKRI, establishing identity as the primary security control plane across services.
The role combines cross-programme IAM design authority with secure-by-design, risk-led decision-making, providing leadership across multiple IAM project workstreams and stakeholder groups.
Key Responsibilities
- Define and govern the target-state IAM architecture, covering:
- Identity verification and assurance
- Identity governance & lifecycle (IGA / JML)
- Authentication and access management (AM)
- Privileged access (PAM)
- Customer and citizen identity (CIAM)
- Non-human / machine identity (NHI/MIM)
- Federation and identity trust models
- Lead end-to-end IAM solution design across programmes, ensuring alignment with enterprise architecture and UK Government standards
- Provide design authority and architectural assurance, ensuring solutions are secure, scalable, and aligned to organisational strategy
- Embed secure-by-design principles, integrating identity into risk-based access control and Zero Trust models
- Define identity lifecycle and governance controls, including provisioning, access review, and deprovisioning
- Design integration and federation patterns, enabling secure identity exchange across UKRI, partners, and suppliers
- Develop transition architectures and migration strategies from legacy identity services
- Deliver a phased IAM roadmap aligned to Discovery, Alpha, and enterprise rollout
- Engage senior stakeholders and provide technical leadership and advisory support across business and technology teams
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Deliverables
Enterprise IAM
- Target architecture and design blueprint
- Current-state IAM assessment and risk analysis
Governance & Lifecycle
- Identity governance and lifecycle (IGA) operating model
Access & Authentication
- Authentication and access management design (including MFA/passwordless)
Privileged Controls
- Privileged access management (PAM) control model
Integration & Federation
- Identity integration and federation architecture
Migration & Roadmap
- Transition and migration architecture
- Phased delivery roadmap with defined outcomes and milestones
Outcomes
Successful delivery will yield:
- Implementation of Zero Trust capabilities
- Improved identity governance and compliance
- Reduction in risk across:
- Access control and identity lifecycle
- Identity-related security incidents
- Compliance audit findings
- Fragmented/inconsistent IAM solutions
Specific Skills Required
Technical & Architecture Expertise
- Expertise in enterprise IAM architecture across:
- IGA
- AM
- PAM
- CIAM
- Federation
- Non-human/machine identity
- Zero Trust architecture – deep experience in identity-driven access control
- Identity lifecycle governance models and audit controls design
- Migration and integration architecture from legacy to modern platforms
Platform experience:
- Entra ID (Microsoft Azure Active Directory)
- AWS Cognito
- IGA and PAM tooling
Security & Risk Capability
- Expertise in modern authentication and assurance models
- Integrating risk-based access controls and policy-driven identity solutions
- Translating technical risk into pragmatic architectural controls
Delivery & Leadership
- Proven leadership in large-scale IAM transformations
- Stakeholder management across:
- Business units
- Security teams
- Technical organizations
- Ability to drive multilayered delivery environments (multi-team or suppliers)
- Experience creating phased roadmaps with measurable outcomes
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Criteria
||| |---‚non-Strengths”|Understandings||-----------------------------|--------------------------------| | Experience with UK Government identity services (e.g. GOV.UK One Login) knowledge of:| | - ISO/IEC 24760 standards | - NIST SP 800-63 guidelines | - NCSC (UK) identity/security recommendations
Public Sector/Research Knowledge Bonus
- Prior experience in public sector IAM implementations
- Federated research identity program exposure
Contract & Notes
- 9-month remote role with occasional visits to Swindon, UK
- Inside IR35 contract: payment rates reflect gross rates per day subject to taxes/statutory charges
- Primary work must remain within the UK only (no overseas assignments allowed)
- Security clearance may apply to cases with high disability candidate volumes
Disability Confident Compliance
As UKRI is a signatory to the Disability Confident Scheme, applicants meeting core criteria and declaring a disability or neurodivergence will be guaranteed an interview stage.
Note: Applicants are urged to apply regardless of condition, and there shall be exceptions where groups with healthy levels of disability candidates may be prioritized.
UK Research and Innovation (UKRI) – scientific funding agency for UK research.*
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location