{"id":2547119,"url":"https://alion.io/job/hellokindred-iam-solution-architect","title":"IAM Solution Architect","company":{"id":4311,"name":"HelloKindred","domain":"hellokindred.com","url":"https://alion.io/company/hellokindred","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sheffield, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":null,"max":403,"currency":"GBP","period":"day","gross":null,"usd_annual":132500},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"PKI","optional":false},{"name":"Service Mesh","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-14T16:19:36Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T00:16:58Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Who is HelloKindred?\nHelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid.\nOur vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers - connecting ambitious talent to flexible opportunities with trusted brands.\n Anticipated Contract End Date/Length: December 20, 2026\nWork Set Up: Hybrid (3 days per week in office, 2 days remote)\nOur client in the Information Technology and Services industry is looking for an Cyber Design SME to provide technical leadership for an enterprise IAM transformation programme. This role will define target architecture and deliver end-to-end technical designs for secure, scalable, and supportable identity services across complex enterprise environments.\nThe successful candidate will translate business, security, and regulatory requirements into technical solutions, ensuring architectural consistency, integration, and alignment with enterprise strategy. Working closely with IAM architects, business stakeholders, product owners, and technology partners, this individual will guide multiple workstreams, support engineering teams, and drive the adoption of modern identity and access management capabilities.\nResponsibilities\nProduce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for identity capabilities.\nDefine end-to-end technical solutions across business, application, data, and infrastructure domains.\nTranslate business, security, and regulatory requirements into secure, scalable, and supportable technical solutions.\nDevelop reference architectures, reusable patterns, and design standards for the programme.\nDefine integration patterns between identity platforms, applications, and infrastructure.\nDesign cloud-native solutions for Google Cloud Platform (GCP) and Kubernetes environments.\nDefine authentication, authorisation, and identity federation architectures.\nDesign Agent Identity, Human Identity, and Workload Identity capabilities.\nDefine Zero Trust security architecture, trust boundaries, and security controls.\nDesign API security, service-to-service authentication, and workload authentication patterns.\nDevelop event-driven integration architectures using messaging and asynchronous processing.\nDesign Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.\nDefine secrets management, certificate lifecycle, and Public Key Infrastructure (PKI) integration patterns.\nDesign high availability, resilience, and disaster recovery architectures.\nEnsure solutions meet non-functional requirements for security, scalability, resilience, and performance.\nProduce architecture decision records (ADRs) and comprehensive technical design documentation.\nSupport architectural governance through Architecture Review Boards and Design Authorities.\nConduct solution assurance and technical design reviews across supplier deliveries.\nIdentify technical risks, assumptions, constraints, and dependencies.\nCollaborate with Enterprise Architecture to maintain alignment with strategic architecture and target-state objectives.\nWork with Product Owners to refine technical requirements and delivery priorities.\nSupport engineering teams throughout implementation, testing, and production readiness.\nMentor engineers and promote technical excellence and engineering best practices.\nEvaluate emerging technologies and vendor products against programme requirements.\nContribute to roadmap planning and the evolution of future-state architecture.\n Extensive experience in enterprise architecture and technical design within complex, global organisations.\nStrong expertise in Identity and Access Management (IAM), including enterprise identity services and identity lifecycle capabilities.\nProven understanding of authentication, authorisation, and identity federation protocols, including OIDC, OAuth 2.0, SAML, and SCIM.\nDemonstrated experience designing Zero Trust security architectures and defining trust boundaries.\nKnowledge of Agent Identity, Human Identity, and Workload Identity architectures.\nExperience with cloud architecture, particularly Google Cloud Platform (GCP).\nStrong understanding of Kubernetes, cloud-native environments, and service mesh architectures.\nExpertise in API architecture and security, including service-to-service and workload authentication.\nExperience designing event-driven architectures using messaging and asynchronous processing.\nFamiliarity with Policy-as-Code frameworks, such as Open Policy Agent (OPA) and Cedar.\nKnowledge of PKI, certificate lifecycle management, and secrets management.\nExperience with DevSecOps practices and CI/CD integration.\nProven ability to design high availability, disaster recovery, and resilient solutions that meet enterprise non-functional requirements.\nStrong background in security architecture, architectural governance, and design assurance.\nExperience producing HLDs, LLDs, architecture decision records, and technical design documentation.\nDemonstrated ability to assess technical risks, dependencies, and solution constraints across multiple workstreams.\nStrong stakeholder management skills, with the ability to collaborate across Enterprise Architecture, engineering teams, Product Owners, business stakeholders, and technology partners.\nProven technical leadership experience, including mentoring engineers, guiding implementation, and promoting engineering best practices.\nAbility to evaluate technologies and vendor solutions, contribute to architectural roadmaps, and maintain alignment with enterprise target-state architecture.\n Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.\nHelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.\nWe appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.\nHelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.","description_format":"text","description_chars":6462,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T17:08:29Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:2","agency","win:early"],"computed_at":"2026-10-15T02:35:16Z"},"pay":{"stated_usd_annual":132500,"is_top_pay":false},"html_url":"https://alion.io/job/hellokindred-iam-solution-architect","json_url":"https://alion.io/job/hellokindred-iam-solution-architect.json","meta":{"generated_at":"2026-10-15T02:35:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3788,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4311},"rest":"https://alion.io/mcp/rest/get_company?id=4311"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhellokindred-iam-solution-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhellokindred-iam-solution-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhellokindred-iam-solution-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hellokindred-iam-solution-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhellokindred-iam-solution-architect"}]}