Design SME NextGen IAM - #2176665

Responsibilities

• Provide endtoend engineering and technical design leadership across enterprise Identity and Access Management initiatives
• Produce and maintain HighLevel Designs HLDs LowLevel Designs LLDs Architecture Decision Records ADRs and supporting technical documentation
• Define endtoend technical solutions across business application data security and infrastructure domains
• Translate business security regulatory and nonfunctional requirements into secure and supportable identity solutions
• Develop reference architectures reusable patterns technical standards and design guardrails
• Define integration patterns between identity platforms applications cloud services and infrastructure components
• Design cloudnative identity solutions for GCP and Kubernetes environments
• Define authentication authorization and identity federation architectures
• Design Human Identity Agent Identity Workload Identity and NonHuman Identity capabilities
• Define Zero Trust architecture security boundaries and trust relationships
• Design API security servicetoservice authentication and workload authentication patterns
• Develop eventdriven integration architectures using messaging and asynchronous processing
• Design Policy Decision Point PDP and Policy Enforcement Point PEP architectures using PolicyasCode
• Define secrets management PKI certificate lifecycle and cryptographic integration patterns
• Design solutions for High Availability resilience scalability performance and Disaster Recovery
• Conduct solution assurance and technical design reviews across internal and supplierdelivered solutions
• Support Architecture Review Boards Design Authorities and technical governance forums
• Identify and manage technical risks assumptions constraints dependencies and design decisions
• Collaborate with Enterprise Architecture to ensure alignment with strategic and targetstate architectures
• Work with Product Owners to refine technical requirements delivery priorities and product roadmaps
• Guide engineering teams throughout implementation testing deployment and productionreadiness activities
• Mentor engineers and promote secure engineering practices technical standards and design consistency
• Evaluate emerging technologies and vendor products against programme and architectural requirements
• Contribute to roadmap planning technology strategy and futurestate architecture

To be successful in this role you should have

• Strong Enterprise Architecture Solution Architecture or Security Architecture experience
• Deep expertise in Identity and Access Management IAM
• Strong knowledge of Authentication and Authorization architectures
• Experience designing Zero Trust architectures and trust boundaries
• Understanding of Human Identity Agent Identity Workload Identity and NonHuman Identity
• Strong experience with Identity Federation standards including OIDC OAuth2 SAML and SCIM
• Handson architecture experience with Google Cloud Platform GCP
• Strong knowledge of Kubernetes and Service Mesh technologies
• Experience designing secure APIs API Gateways and servicetoservice authentication
• Strong understanding of EventDriven Architecture messaging and asynchronous processing
• Experience with PolicyasCode technologies such as OPA and Cedar
• Strong understanding of PDP and PEP authorization architecture
• Knowledge of PKI Certificate Lifecycle Management and Secrets Management
• Experience designing DevSecOps and CICD integration patterns
• Strong knowledge of High Availability Disaster Recovery resilience scalability and performance design
• Experience creating HLDs LLDs ADRs reference architectures and design standards
• Strong Architecture Governance and Solution Assurance experience
• Ability to identify and manage technical risks dependencies constraints and assumptions
• Experience reviewing supplier designs and thirdparty technology solutions
• Strong stakeholder management and technical leadership skills
• Ability to communicate complex architecture decisions to both technical and nontechnical audiences
• Experience mentoring engineers and guiding implementation teams
• Proven experience delivering complex solutions in large global enterprise environments

3 Most Important Skills Critical for Success

1. 1 Enterprise IAM Architecture including Authentication Authorization Identity Federation Human Identity Agent Identity and Workload Identity
2. 2 EndtoEnd Solution Design including HLDs LLDs ADRs reference architectures technical governance and solution assurance
3. 3 CloudNative Security Architecture across GCP Kubernetes API Security Zero Trust PolicyasCode PKI and Secrets Management

Skills

Mandatory Skills : Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Architecture Principle Design