Design SME - IAM

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.</p>

<p class="text-muted mb-3">Define end-to-end Technical Solutions across business, application, data and infrastructure domains.</p>

<p class="text-muted mb-3">Translate business, security and regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements into technical solutions.</h5>

<p class="text-muted mb-3">Develop reference architectures, patterns and design standards for the programme.</p>

<p class="text-muted mb-3">Define integration patterns between identity platforms, applications and infrastructure.</p>

<p class="text-muted mb-3">Design cloud-native solutions for GCP and Kubernetes environments.</p>

<p class="text-muted mb-3">Define authentication, authorisation and federation architectures.</p>

<p class="text-muted mb-3">Design Agent Identity, Human Identity and Workload Identity capabilities.</p>

<p class="text-muted mb-3">Define Zero Trust security architecture and trust boundaries.</p>

<p class="text-muted mb-3">Design API security, service-to-service authentication and workload authentication patterns.</p>

<p class="text-muted mb-3">Develop event-driven integration architectures using messaging and asynchronous processing.</p>

<p class="text-muted mb-3">Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.</p>

<p class="text-muted mb-3">Define secrets management, certificate lifecycle and PKI integration patterns.</p>

<p class="text-muted mb-3">Design resilience, disaster recovery and high availability architectures.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.</h5>

<p class="text-muted mb-3">Produce architecture decision records (ADRs) and design documentation.</p>

<p class="text-muted mb-3">Support governance through Architecture Review Boards and Design Authorities.</p>

<p class="text-muted mb-3">Perform solution assurance and technical design reviews across supplier deliveries.</p>

<p class="text-muted mb-3">Identify technical risks, assumptions, constraints and dependencies.</p>

<p class="text-muted mb-3">Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.</p>

<p class="text-muted mb-3">Work with Product Owners to refine technical</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and delivery priorities.</h5>

<p class="text-muted mb-3">Support engineering teams throughout implementation, testing and production readiness.</p>

<p class="text-muted mb-3">Mentor engineers and promote engineering best practice.</p>

<p class="text-muted mb-3">Evaluate new technologies and vendor products against programme</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Contribute to roadmap planning and future-state architecture.</p>

<p class="text-muted mb-3">Key Skills & Experience:</p>

<p class="text-muted mb-3">Enterprise Architecture</p>

<p class="text-muted mb-3">Identity and Access Management (IAM)</p>

<p class="text-muted mb-3">Authentication and Authorisation</p>

<p class="text-muted mb-3">Zero Trust Architecture</p>

<p class="text-muted mb-3">Agent Identity and Workload Identity</p>

<p class="text-muted mb-3">Identity Federation (OIDC, OAuth2, SAML, SCIM)</p>

<p class="text-muted mb-3">Cloud Architecture (GCP)</p>

<p class="text-muted mb-3">Kubernetes and Service Mesh</p>

<p class="text-muted mb-3">API Architecture and Security</p>

<p class="text-muted mb-3">Event-driven Architecture</p>

<p class="text-muted mb-3">Policy-as-Code (OPA/Cedar)</p>

<p class="text-muted mb-3">PKI, Certificates and Secrets Management</p>

<p class="text-muted mb-3">DevSecOps and CI/CD</p>

<p class="text-muted mb-3">High Availability and Resilience Design</p>

<p class="text-muted mb-3">Security Architecture</p>

<p class="text-muted mb-3">Architecture Governance</p>

<p class="text-muted mb-3">Stakeholder Management</p>

<p class="text-muted mb-3">Technical Leadership</p>