Randstad
Security & Identity Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security & Identity Architect
📌 Role Details
💼 Title: Security & Identity Architect
📍 Location: On-site in Dartford (Tuesday–Thursday) | Remote (Monday & Friday by agreement)
📝 Contract: 6 week contract (potential for extension)
Rate: £800 / Per Day (Outside IR35)
🎯 Role Purpose
We are looking for an experienced Security & Identity Architect to drive the security design, governance, and assurance for a large-scale digital manufacturing capability on one of the UK’s most critical infrastructure programmes. Working alongside Enterprise, Solution, Data, and Manufacturing Architects, you will ensure Cyber Security, Identity & Access Management (IAM), and Secure-by-Design principles are deeply integrated across both Enterprise IT and Operational Technology (OT) environments.
🔑 Key Responsibilities
🛡️ Security Architecture & IAM Strategy
- Ecosystem Protection: Implement and embed robust security architecture across the entire Digital Manufacturing ecosystem.
- IAM Strategy: Lead the IAM approach across Enterprise IT, Operational Technology (OT), and shop-floor manufacturing systems.
- Secure HLD: Ensure Cyber Security and IAM principles are embedded throughout all High Level Design activities.
- Access Control & Lifecycle: Define RBAC, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and user lifecycle models across all platforms.
- Federation & SSO: Support Single Sign-On (SSO) and identity federation across enterprise platforms and third-party partner environments.
🔌 IT / OT Integration & Cloud Security
- Secure Integration: Secure APIs, machine identities, Industrial IoT (IIoT) devices, and data threads connecting SAP, PLM, MES, QMS, and Microsoft platforms.
- Network Segmentation: Enforce strict network zoning and IT/OT security principles (e.g., Purdue Model).
- Cloud & Zero Trust: Apply Zero Trust principles, least-privilege access, cloud security (Azure), and data encryption/classification standards.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
🏛️ Governance, Risk & Assurance
- Architecture Assurance: Review and assure designs from internal teams, primary delivery partners, and tech vendors.
- Governance Boards: Represent security and identity architecture at the Architecture Review Board (ARB).
- Compliance: Ensure all solutions comply with Enterprise IT security policies, nuclear requirements, and industry standards.
- Risk Management: Proactively identify programme security risks and define pragmatic mitigation strategies.
📦 Key Deliverables
- Security Architecture Input for the High Level Design (HLD)
- Identity & Access Management (IAM) Recommendations & Artefacts
- Security Architecture Assurance Reviews
- Security Requirements Catalogue
- Programme Security Risk & Mitigation Log
- Architecture Governance & ARB Submissions
🛠️ Required Experience & Technical Knowledge
💼 Experience
- Enterprise & Solution Security Architecture within major digital transformation programmes
- Identity & Access Management (IAM) & Privileged Access Management (PAM)
- Operational Technology (OT) & Industrial Control Systems (ICS) security
- Cloud Security Architecture (Microsoft Azure preferred)
- Digital Manufacturing ecosystems (MES, PLM, Quality Systems, IIoT)
- Delivery Partner Management (assessing Tier-1 system integrators)
Get help with your application
Your very own career expert that helps elevate your application to the next level.
📚 Frameworks & Technologies
- Frameworks & Standards: ISA-95, Purdue Model, IEC 62443, NIST Cyber Security Framework, ISO 27001, CIS Controls, Zero Trust
- Technologies & Tools: Microsoft Entra ID, Microsoft Defender Suite, SAP Security, PLM Platforms, SAML / OAuth2 / OpenID Connect, Industrial IoT (IIoT)
🌟 Personal Attributes
- Collaborative & Pragmatic: Balances strict cyber mandates with real-world project delivery deadlines.
- Clear Communicator: Explains complex technical risks effortlessly to both technical and executive stakeholders.
- Thrives in Ambiguity: Comfortable operating within fast-paced, multi-supplier transformation programmes.
- Constructive Challenge: Able to push back constructively on vendor designs while keeping delivery on track.
🏆 Success Measures
- 🎯 Design Integrity: Secure-by-Design and Identity-by-Design principles embedded across all workstreams by the end of the HLD phase.
- 🚫 Risk Mitigation: Security flaws identified early to prevent expensive redesigns during full Digital Delivery.
- 📋 Gap Identification: Clear documentation of programme-specific IAM and security gaps with defined mitigation paths.
- 🔄 Seamless Transition: A clear security assurance playbook ready to transition smoothly into implementation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills