Security Architect

Job Description:

Key Skills & Experience

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.

• Define end-to-end solution architecture across business, application, data and infrastructure domains.

• Translate business, security and regulatory requirements into technical solutions.

• Develop reference architectures, patterns and design standards for the programme.

• Define integration patterns between identity platforms, applications and infrastructure.

• Design cloud-native solutions for GCP and Kubernetes environments.

• Define authentication, authorisation and federation architectures.

• Design Agent Identity, Human Identity and Workload Identity capabilities.

• Define Zero Trust security architecture and trust boundaries.

• Design API security, service-to-service authentication and workload authentication patterns.

• Develop event-driven integration architectures using messaging and asynchronous processing.

• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.

• Define secrets management, certificate lifecycle and PKI integration patterns.

• Design resilience, disaster recovery and high availability architectures.

• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.

• Produce architecture decision records (ADRs) and design documentation.

• Support governance through Architecture Review Boards and Design Authorities.

• Perform solution assurance and technical design reviews across supplier deliveries.

• Identify technical risks, assumptions, constraints and dependencies.

• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.

• Work with Product Owners to refine technical requirements and delivery priorities.

• Support engineering teams throughout implementation, testing and production readiness.

• Mentor engineers and promote engineering best practice.

• Evaluate new technologies and vendor products against programme requirements.

• Contribute to roadmap planning and future-state architecture.

Essential Skills

* Enterprise Solution Architecture

* Identity and Access Management (IAM)

* Authentication and Authorisation

* Zero Trust Architecture

* Agent Identity and Workload Identity

* Identity Federation (OIDC, OAuth2, SAML, SCIM)

* Cloud Architecture (GCP)

* Kubernetes and Service Mesh

* API Architecture and Security

* Event-driven Architecture

* Policy-as-Code (OPA/Cedar)

* PKI, Certificates and Secrets Management

* Dev Sec Ops  and CI/CD

* High Availability and Resilience Design

* Security Architecture

* Architecture Governance

* Stakeholder Management

* Technical Leadership