IDENTITY ARCHITECT – SECURE ENTERPRISE IAM
Job Title:
Identity Architect / Lead IAM Architect
Location:
Wiltshire (Hybrid – 2 days/week onsite)
Job Type:
Permanent
Clearance Required:
Active SC Clearance (Mandatory)
Salary:
Competitive + Benefits (DOE)
Start Date:
Immediate
Job Summary
We are seeking an experienced Identity Architect
with active SC clearance to take complete architectural ownership of a large-scale, enterprise Identity and Access Management (IAM) service supporting a highly secure public sector program.
This role requires a balanced senior architect who can drive high-level strategic direction while remaining comfortable working hands-on with identity schemas, APIs, workflow engine logic, data feeds, and live service support teams.
Key Accountabilities & Role Overview
- Architecture Leadership: Lead end-to-end IAM architecture across development, data, and live service operations; act as the lead technical authority across delivery teams, third-party suppliers, and senior stakeholders.
- Core IAM Capability Ownership: Drive strategic oversight of Joiner/Mover/Leaver (JML) processes, identity lifecycle management, role governance, access recertification, and regulatory audit compliance.
- Technical & Schema Design: Shape and review detailed designs covering identity schemas, LDAP directories, data attribute models, provisioning workflows, microservices, and API integrations.
- Platform Modernisation & Debt Reduction: Simplify legacy architecture patterns, eliminate unnecessary customisations, champion API-led integration models, and support roadmap alignment with cloud-native / Microsoft Entra environments.
- Service Supportability & Operations: Collaborate directly with L2/L3 support and DevOps teams to author runbooks, perform root-cause analysis on complex defects, and ensure seamless BAU service transition.
Mandatory Criteria & Technical Requirements
- Security Clearance: Active UK SC Clearance is mandatory prior to starting.
- Architecture Track Record: Proven experience as a Lead, Senior, or Principal Architect owning enterprise-wide IAM solutions.
- Domain Expertise: Deep knowledge of identity governance, authentication/authorization protocols, directory services, and enterprise integration patterns within government, defence, or regulated environments.
- Hands-on Technical Capability: Practical expertise with identity schema design, API interfaces, microservices, workflow logic, and data transformation/ETL pipelines.
- Location: Ability to work onsite in Corsham at least 2 days per week.
Desirable Experience
- IAM Platforms: OpenText/NetIQ, SailPoint, Microsoft Entra ID (Azure AD), Okta, ForgeRock, or CyberArk.
- Cloud & Federation: AWS cloud environments, M365 identity integration, SAML/OIDC, and API Gateways.
- Frameworks: Secure-by-Design principles, containerised deployments, and automated deployment pipelines.
How to Apply
If you meet the mandatory SC clearance requirement and possess a strong technical background in enterprise identity architecture, please submit your CV for immediate consideration.
