eTeam
Lead IAM Technical Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role: Lead IAM Technical Architect
Contract Length: Until 31/03/27
Location: Remote with occasional travel to Swindon
IR35: In scope of IR35
Role Summary
Lead IAM Technical Architect responsible for defining and delivering the enterprise identity architecture for client, establishing identity as the primary security control plane across services.
The role combines cross-programme IAM design authority with secure-by-design, risk-led decision making, providing leadership across multiple IAM project workstreams and stakeholder groups.
Key Responsibilities
- Define and govern the target-state IAM architecture, covering:
- Identity verification and assurance
- Identity governance & lifecycle (IGA / JML)
- Authentication and access management (AM)
- Privileged access (PAM)
- Customer and citizen identity (CIAM)
- Non-human / machine identity (NHI/MIM)
- Federation and identity trust models
- Lead end-to-end IAM solution design across programmes, ensuring alignment with enterprise architecture and UK Government standards
- Provide design authority and architectural assurance, ensuring solutions are secure, scalable, and aligned to organisational strategy
- Embed secure-by-design principles, integrating identity into risk-based access control and Zero Trust models
- Define identity lifecycle and governance controls, including provisioning, access review, and deprovisioning
- Design integration and federation patterns, enabling secure identity exchange across UKRI, partners, and suppliers
- Develop transition architectures and migration strategies from legacy identity services
- Deliver a phased IAM roadmap aligned to Discovery, Alpha, and enterprise rollout
- Engage senior stakeholders and provide technical leadership and advisory support across business and technology teams
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Deliverables
- Enterprise IAM target architecture and design blueprint
- Current-state IAM assessment and risk analysis
- Identity governance and lifecycle (IGA) operating model
- Authentication and access management design (including MFA/passwordless)
- Privileged access management control model
- Identity integration and federation architecture
- Transition and migration architecture
- Phased delivery roadmap with defined outcomes and milestones
IAM Project Background
Strategic multi-year programme to establish identity as a core control plane aligned to Zero Trust principles
Transformation of IAM services into a policy-driven, standards-aligned, enterprise capability
Year 1 focus on:
- Identity lifecycle governance
- Strong authentication and credential management
- Identity data quality and audit capability
Year 2 expansion into:
- Privileged access management
- CIAM and external identities
- Full enterprise integration and federation
- Delivery of audit-ready identity controls, supporting compliance, assurance levels, and regulatory requirements.
Outcomes
- Delivery of Zero Trust capabilities
- Identity governance and compliance improvements
- Risk reduction across access control and identity lifecycle
- Reduce the risk of increased exposure to:
- Identity-related security risks
- No compliance audit and regulatory findings
- Fragmented and inconsistent IAM solutions
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Specific skills required for the role
Technical and Architecture Expertise
- Enterprise IAM architecture across IGA, AM, PAM, CIAM, federation, and NHI/MIM
- Strong experience in Zero Trust architecture and identity-driven access control
- Design of identity lifecycle governance models and audit controls
- Integration and migration architecture across legacy and modern platforms
- Experience with platforms such as:
- Entra ID
- AWS Cognito
- IGA and PAM tooling
Security and Risk Capability
- Strong understanding of modern authentication and assurance models
- Experience embedding risk-based access controls and policy-driven identity
- Ability to translate risk into pragmatic architectural controls
Delivery and Leadership
- Proven delivery of large-scale IAM transformations
- Stakeholder engagement across business, security, and technical domains
- Ability to lead multi-team and supplier delivery environments
- Experience delivering phased roadmaps with measurable outcomes
Desirable
- Experience with UK Government identity services (e.g. GOV.UK One Login)
- Knowledge of ISO/IEC 24760, NIST SP 800-63, and NCSC guidance
- Experience in public sector or federated research environments
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location