Job Description:
Key Skills & Experience
• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
• Define end-to-end solution architecture across business, application, data and infrastructure domains.
• Translate business, security and regulatory requirements into technical solutions.
• Develop reference architectures, patterns and design standards for the programme.
• Define integration patterns between identity platforms, applications and infrastructure.
• Design cloud-native solutions for GCP and Kubernetes environments.
• Define authentication, authorisation and federation architectures.
• Design Agent Identity, Human Identity and Workload Identity capabilities.
• Define Zero Trust security architecture and trust boundaries.
• Design API security, service-to-service authentication and workload authentication patterns.
• Develop event-driven integration architectures using messaging and asynchronous processing.
• Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
• Define secrets management, certificate lifecycle and PKI integration patterns.
• Design resilience, disaster recovery and high availability architectures.
• Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
• Produce architecture decision records (ADRs) and design documentation.
• Support governance through Architecture Review Boards and Design Authorities.
• Perform solution assurance and technical design reviews across supplier deliveries.
• Identify technical risks, assumptions, constraints and dependencies.
• Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
• Work with Product Owners to refine technical requirements and delivery priorities.
• Support engineering teams throughout implementation, testing and production readiness.
• Mentor engineers and promote engineering best practice.
• Evaluate new technologies and vendor products against programme requirements.
• Contribute to roadmap planning and future-state architecture.
Essential Skills
* Enterprise Solution Architecture
* Identity and Access Management (IAM)
* Authentication and Authorisation
* Zero Trust Architecture
* Agent Identity and Workload Identity
* Identity Federation (OIDC, OAuth2, SAML, SCIM)
* Cloud Architecture (GCP)
* Kubernetes and Service Mesh
* API Architecture and Security
* Event-driven Architecture
* Policy-as-Code (OPA/Cedar)
* PKI, Certificates and Secrets Management
* DevSecOps and CI/CD
* High Availability and Resilience Design
* Security Architecture
* Architecture Governance
* Stakeholder Management
* Technical Leadership