IDAM Architect

Salary: £100,000 - 100,000 per year

Requirements:

• Must hold or be eligible to obtain DV clearance; existing DV clearance is essential
• 10 years continuous UK residency required
• Minimum 12 years identity and access management experience, including 5 years in an architecture role
• Proven experience designing enterprise-scale IDAM solutions
• Strong background in defence, aerospace or government IDAM programmes
• Demonstrated expertise with modern identity platforms, including Azure AD, Okta, Ping and ForgeRock
• Track record of leading IDAM modernisation and technology transformation programmes
• Deep expertise in IDAM architecture patterns, methodologies and best practices
• Expert-level knowledge of LDAP, Active Directory, OAuth, SAML and OpenID Connect
• Strong understanding of Azure AD, Office 365 identity, hybrid identity and cloud-native identity solutions
• Proficiency in PAM, RBAC and ABAC
• Knowledge of identity governance, access certification and entitlement management
• Expertise in API security, service-to-service authentication and microservices identity
• Familiarity with MOD security requirements, Classification Guides and defence compliance
• Understanding of cryptography, encryption and security protocols
• Exceptional strategic thinking with strong technical depth
• Outstanding communication and stakeholder engagement skills
• Strong problem-solving and analytical capabilities
• Proven ability to lead technical teams and influence senior stakeholders
• Commitment to security and compliance excellence
• Experience with defence or aerospace IDAM programmes
• CISSP, CISM or equivalent security certifications
• Azure AD or Okta advanced certifications
• Experience with identity-driven security and zero-trust architecture
• Knowledge of ITAR compliance and export controls

Responsibilities:

• Design enterprise-scale identity and access management architectures supporting defence operations
• Architect secure authentication, multi-factor authentication and authorisation frameworks
• Design role-based access control, attribute-based access control and privilege access management solutions
• Develop identity governance, access lifecycle management and entitlement management strategies
• Lead IDAM technology evaluation and vendor selection processes
• Ensure IDAM architectures comply with MOD Classification Guides, Defence Security Policy and ITAR regulations
• Design identity solutions supporting defence contractor personnel vetting requirements
• Architect data protection and encryption strategies aligned with defence security standards
• Lead security risk assessments for IDAM systems and vulnerabilities
• Design audit and logging capabilities supporting MOD compliance and forensic requirements
• Lead design and implementation of modern IDAM platforms such as AD/Azure AD, Okta, Ping and ForgeRock
• Design cloud-ready and hybrid identity solutions supporting multi-cloud environments
• Guide API-driven identity architecture and microservices-based identity solutions
• Lead IDAM system migrations and technology modernisation programmes
• Lead IDAM technical teams and provide architectural mentoring
• Establish IDAM design standards, architecture patterns and operational governance
• Drive technical decision-making through IDAM design reviews
• Document IDAM architecture decisions and design specifications
• Design IDAM integration with enterprise applications, systems and cloud platforms
• Architect identity federation, single sign-on and cross-domain authentication
• Support IDAM operational readiness, performance monitoring and incident response
• Establish IDAM lifecycle management and continuous improvement processes
• Serve as technical authority for IDAM architecture discussions with customer leadership
• Present identity and access management recommendations to defence programme teams
• Lead IDAM design workshops and customer validation activities

Technologies:

• API
• Active Directory
• Architect
• Azure
• Cloud
• Cryptography
• Support
• LDAP
• OAuth
• Office 365
• OpenID
• RBAC
• SAML
• Security
• microservices

More:

We are DXC Technology, a Fortune 500 company with over 40 years presence in the UK, and we have recently established our Aerospace and Defence Hub in Farnborough, Hampshire. We deliver secure identity, access and data management solutions that enable defence and aerospace organisations to operate securely at scale. This is a permanent, full-time role based in Farnborough, working within our Aerospace and Defence team. We offer a highly competitive salary, a comprehensive benefits package, enhanced pension, private medical insurance, flexible working and professional development support. We prioritise in-person collaboration while still supporting wellbeing, productivity and different working styles, and we are committed to fostering an inclusive environment where everyone can thrive.

last updated 31 week of 2026