Manager - Identity Security Architect - Cybersecurity Consulting

Description

The company's cyber technology and transformation team is growing quickly. It supports clients through the full cyber security lifecycle, from technology assessments and rolling out cyber solutions to setting cyber strategy.

This client-facing role leads identity and access management architecture, covering design, rollout and governance across whole organisations.

The posting does not give a job location or work model.

Responsibilities

• Set IAM architecture direction that fits each client's business and security goals.
• Design secure, scalable identity services covering authentication, authorization, identity lifecycle, customer identity (CIAM) and privileged access management (PAM).
• Act as the technical authority on IAM tools such as Azure AD, ADFS, SailPoint, Saviynt, Okta, CyberArk and ForgeRock.
• Lead a client project that merges legacy and modern identity providers into one IAM framework.
• Lead deployment and configuration of IAM solutions across cloud and on-premises environments.
• Write architecture principles covering scalability, resilience, modularity and security by design.
• Produce IAM integration designs and guidance for new applications and services, including APIs, SSO and federation through SAML, OAuth and OpenID Connect.
• Review IAM systems for performance, availability and security.
• Promote authentication and authorization reference architectures for current, new and emerging IAM technologies.
• Write and enforce IAM policies, standards and good practice.
• Help clients meet regulatory requirements such as GDPR, SOX and HIPAA, along with their internal security policies.
• Take part in enterprise architecture governance and strategic planning.

Requirements

• Bachelor's or Master's degree in computer science, information technology, engineering or a related field.
• 8+ years of experience in IAM architecture and implementation.
• Proven work with IAM platforms such as SailPoint, ForgeRock, Okta, CyberArk or similar.
• Solid knowledge of directory services (Active Directory, LDAP), PKI and identity federation.
• Understanding of cloud architecture and strategy across public, private and hybrid models.
• Strong grasp of IAM protocols and standards: SAML, OAuth2, OpenID Connect and SCIM.
• Familiarity with Azure, AWS and GCP, and with hybrid identity models.
• Knowledge of Zero Trust Architecture and current security frameworks.
• Strong analytical and problem-solving skills.
• Clear communication and stakeholder management skills.
• Able to work independently and lead cross-functional teams.
• Careful attention to detail and a focus on quality.
• Nice to have: CISSP, CISM or product vendor certifications.
• Nice to have: experience with CI/CD pipelines and DevSecOps practices.
• Optional skills listed include agile methodology, analytical thinking, cybersecurity policy, encryption technologies, managed services, Azure Data Factory and 16 more.

Conditions

Client-facing role.

The posting does not state security clearance, visa sponsorship, travel requirements or preferred languages.

No degree or field of study is marked as required or preferred, and no certifications are marked as required.