Design SME – Next Gen

Overview

In this role you will steer the next-generation Identity & Access Management transformation, owning architecture across a large IAM estate. You’ll translate business, security and regulatory requirements into secure, scalable solutions aligned with enterprise standards. You will lead end-to-end design across cloud, applications, data and infrastructure, and shape patterns for secure identity, authentication, and federation. This position focuses on cloud-native IAM in GCP/Kubernetes, Zero Trust, policy-driven security, and architectural governance to enable secure, resilient identity services.

Pay / Benefits

• onsite 3 days per week
• ASAP start
• Contract until December 2026
• competitive daily rate 550
• initial contract term

Responsibilities

• Produce HLDs and LLDs for enterprise IAM capabilities
• Define end-to-end technical solutions across business, application, data and infrastructure domains
• Design authentication, authorization and identity federation architectures
• Develop reference architectures, standards and reusable design patterns
• Design cloud-native IAM solutions in GCP and Kubernetes
• Define integration patterns between identity platforms, apps and infrastructure
• Design Agent, Human and Workload Identity capabilities
• Develop Zero Trust security architectures and trust boundary models
• Design API security, service-to-service authentication and workload authentication
• Create event-driven architectures with asynchronous messaging
• Develop Policy-as-Code architectures (OPA, Cedar)
• Define PKI, certificate lifecycle and secrets management
• Ensure security, scalability, resilience and performance requirements
• Produce ADRs and technical governance documentation
• Support Architecture Review Boards and Design Authority governance
• Conduct technical assurance reviews across internal and supplier-delivered solutions
• Identify and manage technical risks, dependencies, assumptions and constraints
• Partner with Enterprise Architects, Product Owners and Engineering teams
• Provide technical leadership, mentoring and engineering best practices

Key requirements

• Experience leading enterprise IAM design and architecture
• Ability to translate requirements into secure, scalable identity solutions
• Experience with cloud-native IAM in GCP and Kubernetes
• Knowledge of authentication, authorization and identity federation
• Experience with Zero Trust architectures and policy-driven security
• Familiarity with API security, service-to-service and workload authentication
• Experience with event-driven architectures and asynchronous processing
• Proficiency in Policy-as-Code (OPA, Cedar)
• PKI and secrets management expertise
• Participation in architecture governance and design authority activities
• Risk, dependency and constraint management
• Stakeholder collaboration across Enterprise Architects, Product Owners and Engineering teams
• Technical leadership and mentoring capabilities

• leadership
• mentoring
• cross-functional collaboration
• GCP
• Kubernetes
• Identity and Access Management

…