Solutions Architect - IAM​/Okta; office locations

Solutions Architect - IAM / Okta

Locations:
Cambridge, Leeds, London. Apply for the role at Genomics England.

Genomics England partners with the NHS to provide whole genome sequencing diagnostics. We also equip researchers to find the causes of disease and develop new treatments – with patients and participants at the heart of it all. Our mission is to continue refining, scaling, and evolving our ability to enable others to deliver genomic healthcare and conduct genomic research. We are accelerating our impact and working with patients, doctors, scientists, government and industry to improve genomic testing, and help researchers access the health data and technology they need to make new medical discoveries and create more effective, targeted medicines for everybody.

Genomics England is looking for a highly skilled Identity and Access Management (IAM) Solution Architect with deep, hands‑on expertise in Okta, and a strong knowledge of other related tools such as AWS Identity Centre, NHS CIS2, Azure AD etc. The successful candidate will be responsible for designing, implementing, and managing IAM solutions that leverage Okta as the strategic identity platform to ensure secure and efficient access to our systems and applications across our cloud and on‑premise estate.

You will be a key member of our team working with product managers, engineers and suppliers to determine how our IAM solution evolves as part of GEL’s Cloud Centre of Excellence (CCoE). This Solutions Architect role sits within the Scalable Tech Service and underpins our Healthcare and Research services as well as our operational business functions. Your previous roles will include having designed and implemented large‑scale IAM solutions with Okta at the centre across multiple complex cohorts.

• Work with product, user design and research colleagues to identify and refine requirements for our IAM and Privileged Access Management (PAM) services, with Okta integration as a core element
• Design and implement IAM/PAM solutions using Okta to meet the organization's security and compliance requirements
• Develop and maintain IAM policies, standards, and procedures, including Okta‑specific governance and best practices
• Integrate Okta with various applications and systems, ensuring seamless and secure access for users
• Provide technical leadership and guidance on IAM best practices and Okta‑specific configurations
• Collaborate with cross‑functional teams to understand business requirements and translate them into effective IAM solutions
• Conduct regular security assessments and audits to identify and mitigate potential risks
• Stay up‑to‑date with the latest trends and developments in Okta and IAM technologies
• Troubleshoot and resolve IAM‑related issues, providing timely support to end‑users
• Develop and deliver training and documentation to ensure effective use of IAM solutions, including Okta workflows and policies

• Strong understanding of IAM principles, standards, and best practices
• Proven experience as an IAM Solution Architect, with expert‑level, hands‑on experience implementing Okta at scale
• Architecture and design of a hub‑and‑spoke identity model using Okta as the central Identity Provider (IdP), with deep integration into AWS Identity and Active Directory environments
• Deep knowledge and experience of Okta, primarily as an IdP, including Zero Trust principles, sign‑on policies, workflows, lifecycle automation, and adaptive authentication
• Experience of a wide range of related IAM tools/technologies, e.g., AWS Identity Centre, NHS CIS2, SCIM provisioning, SAML, OIDC, OAuth2, Kerberos, LDAP/LDAPS, RADIUS/TACACS+
• Ability to confidently design, lead and deliver an enterprise‑grade IAM service using Okta as the primary IdP, aligned with internal standards and roadmaps
• Strong understanding of AD forest/domain design, group policy objects (GPOs), delegation models, and hybrid identity synchronisation with cloud Id Ps
• Deep understanding of identity governance, including:
  • Lifecycle management / JML (Joiner‑Mover‑Leaver)
  • Access reviews and certification
  • Federation and posture‑aware…