IAM Design SME; Zero Trust & Cloud Architecture

Position: IAM Design SME (Zero Trust & Cloud Architecture)
Job title:

IAM Design SME (Zero Trust & Cloud Architecture)

Rate: £540 per day inside ir35

Location:

Sheffield - 3 days per week

Contract:

6 months rolling

We're looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management (IAM) capabilities.

This is a high-impact opportunity to take technical ownership of identity architecture, define secure cloud-native solutions and influence how identity services are designed, integrated and delivered across a complex global enterprise. You'll act as a technical authority across the programme, translating complex security, business and regulatory requirements into robust, scalable and supportable designs.

You'll be responsible for:

Producing end-to-end High-Level and Low-Level Designs (HLDs/LLDs).
Defining IAM architecture across Human, Agent and Workload Identity.
Designing Zero Trust, authentication, authorisation and federation solutions.
Developing cloud-native architectures across GCP, Kubernetes and service mesh environments.
Defining secure API, service-to-service authentication and event-driven integration patterns.
Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions.
Driving architecture governance, design assurance and technical decision-making across multiple work streams.
Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions.

Expereince:

We're looking for someone with strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture.

Key experience includes:

Enterprise Architecture and Identity & Access Management (IAM).
Authentication, authorisation, federation and OIDC, OAuth2, SAML and SCIM.
Zero Trust, Agent Identity and Workload Identity.
GCP, Kubernetes, service mesh and cloud architecture.
API security, event-driven architecture and Policy-as-Code (OPA/Cedar).
PKI, certificates, secrets management and Dev Sec Ops /CI/CD.
High availability, resilience and security architecture.
Architecture governance, stakeholder engagement and technical leadership.

If you're an IAM design specialist who can bridge enterprise architecture, identity security and hands-on engineering design, please feel free to submit your CV