IAM Solution Architect

Anticipated Contract End Date/Length: December 20, 2026

Work Set Up: Hybrid (3 days per week in office, 2 days remote)

Our client in the Information Technology and Services industry is looking for an Cyber Design SME to provide technical leadership for an enterprise IAM transformation programme. This role will define target architecture and deliver end-to-end technical designs for secure, scalable, and supportable identity services across complex enterprise environments.

The successful candidate will translate business, security, and regulatory requirements into technical solutions, ensuring architectural consistency, integration, and alignment with enterprise strategy. Working closely with IAM architects, business stakeholders, product owners, and technology partners, this individual will guide multiple workstreams, support engineering teams, and drive the adoption of modern identity and access management capabilities.

Responsibilities

• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for identity capabilities.
• Define end-to-end technical solutions across business, application, data, and infrastructure domains.
• Translate business, security, and regulatory requirements into secure, scalable, and supportable technical solutions.
• Develop reference architectures, reusable patterns, and design standards for the programme.
• Define integration patterns between identity platforms, applications, and infrastructure.
• Design cloud-native solutions for Google Cloud Platform (GCP) and Kubernetes environments.
• Define authentication, authorisation, and identity federation architectures.
• Design Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust security architecture, trust boundaries, and security controls.
• Design API security, service-to-service authentication, and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle, and Public Key Infrastructure (PKI) integration patterns.
• Design high availability, resilience, and disaster recovery architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience, and performance.
• Produce architecture decision records (ADRs) and comprehensive technical design documentation.
• Support architectural governance through Architecture Review Boards and Design Authorities.
• Conduct solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints, and dependencies.
• Collaborate with Enterprise Architecture to maintain alignment with strategic architecture and target-state objectives.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing, and production readiness.
• Mentor engineers and promote technical excellence and engineering best practices.
• Evaluate emerging technologies and vendor products against programme requirements.
• Contribute to roadmap planning and the evolution of future-state architecture.

• Extensive experience in enterprise architecture and technical design within complex, global organisations.
• Strong expertise in Identity and Access Management (IAM), including enterprise identity services and identity lifecycle capabilities.
• Proven understanding of authentication, authorisation, and identity federation protocols, including OIDC, OAuth 2.0, SAML, and SCIM.
• Demonstrated experience designing Zero Trust security architectures and defining trust boundaries.
• Knowledge of Agent Identity, Human Identity, and Workload Identity architectures.
• Experience with cloud architecture, particularly Google Cloud Platform (GCP).
• Strong understanding of Kubernetes, cloud-native environments, and service mesh architectures.
• Expertise in API architecture and security, including service-to-service and workload authentication.
• Experience designing event-driven architectures using messaging and asynchronous processing.
• Familiarity with Policy-as-Code frameworks, such as Open Policy Agent (OPA) and Cedar.
• Knowledge of PKI, certificate lifecycle management, and secrets management.
• Experience with DevSecOps practices and CI/CD integration.
• Proven ability to design high availability, disaster recovery, and resilient solutions that meet enterprise non-functional requirements.
• Strong background in security architecture, architectural governance, and design assurance.
• Experience producing HLDs, LLDs, architecture decision records, and technical design documentation.
• Demonstrated ability to assess technical risks, dependencies, and solution constraints across multiple workstreams.
• Strong stakeholder management skills, with the ability to collaborate across Enterprise Architecture, engineering teams, Product Owners, business stakeholders, and technology partners.
• Proven technical leadership experience, including mentoring engineers, guiding implementation, and promoting engineering best practices.
• Ability to evaluate technologies and vendor solutions, contribute to architectural roadmaps, and maintain alignment with enterprise target-state architecture.

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.