Identity and Access Management Architect / Engineer

Salary: £95,000 - 130,000 per year

Requirements:

• We are seeking experienced Identity and Access Management professionals with a strong background in architecture and engineering.
• We are looking for candidates with experience supporting the design, implementation, and testing of identity and access management solutions.
• We value the ability to maintain and operate IAM technology.
• A bachelors degree, or equivalent, in Computer Science or Engineering is desirable.
• You should be familiar with and/or have experience with a majority of the following: enterprise identity across Enterprise and Customer Authentication; IGA, PAM, AM, AD, and CIAM solutions such as SailPoint and Saviynt; identity architecture in digital transformation environments; cloud hosting services including AWS, Microsoft Azure, and Google Cloud Platform; Microsoft Active Directory/Azure AD Domain Services, Federation Services, Certificate Services, DNS, and DHCP; decentralised identity, verifiable credentials, microservices, and Trust over IP architecture stack.
• Desirable experience includes understanding of malware and the modern threat landscape, relevant certifications such as CIAM, CISSP, or CAMS, exposure to DevOps tools and repositories such as Git, Azure DevOps, Kubernetes, Docker, Jenkins, and Ansible, RBAC design, Linux operating systems, and modern authentication concepts such as Self-Service Identity, Bring your own Identity, SCIM, SAML, WS-Federation, OAuth, and Open ID Connect.
• We are looking for experience with waterfall and agile methodologies, often within client-specified frameworks.
• We value experience managing junior team members across different locations, cultures, and experience levels.
• We are looking for detail-oriented candidates with strong problem-solving skills.
• We require excellent oral and written communication skills, including the ability to communicate status concisely and create customer reports and presentations.

Responsibilities:

• Support the definition of IAM use cases, functional and non-functional solution requirements, and technical specifications for user authentication, access control, integration, performance, and scalability.
• Support the design of IAM solutions by creating high-level and low-level designs aligned with business objectives and industry cybersecurity standards such as NIST.
• Create high-level and low-level system architecture diagrams with technical descriptions of each component.
• Define dependencies required to implement the solution, including network rules, server resources, and storage requirements.
• Define system specifications to support optimal performance.
• Integrate workflows with third-party systems and security tools, including SIEM solutions, MFA solutions, and cloud platforms such as AWS and Azure.
• Define the RACI matrix to operate and maintain the solutions infrastructure components.
• Support the development of technical and process documentation for IAM implementations, including user onboarding, access requests, identity governance, approval workflows, authentication workflows, and provisioning/deprovisioning.
• Support implementing IAM solutions by installing solution components in on-premise environments where relevant, or configuring cloud components and scripting/coding plug-ins or extensions for cloud solutions.
• Work with IT infrastructure teams to ensure prerequisites and dependencies are in place.
• Integrate IAM solutions with enterprise applications and systems such as directories, cloud applications, HR systems, and third-party identity providers.
• Support unit, integration, functional, and non-functional testing for IAM solutions.
• Troubleshoot and resolve issues such as authentication failures, access policy conflicts, and user provisioning errors by working with vendors.
• Support post-implementation services, including hyper-care support and advanced troubleshooting and debugging in production.
• Conduct knowledge transfer to client IAM teams through technical training on operating and maintaining the solution.

Technologies:

• AWS
• Active Directory
• Ansible
• Azure
• Cloud
• DevOps
• Docker
• Git
• IAM
• Support
• Jenkins
• Kubernetes
• Linux
• Matrix
• Network
• OAuth
• RBAC
• SAML
• Security
• microservices
• Architect
• Web

More:

We are Deloittes Cyber team within Technology and Transformation, working to help clients navigate an ever-changing threat landscape by deploying powerful solutions and providing managed services. We simplify complexity, protect and enable our clients, accelerate innovation, and improve profitability. This role is based in London with hybrid working, giving you the opportunity to work across the local office, virtual collaboration spaces, client sites, and remotely depending on role requirements. We also support returners with coaching and support for those coming back after a career break of two years or more. At Deloitte, we value inclusion, collaboration, integrity, and measurable impact, and we are committed to supporting your wellbeing, development, and growth.

last updated 36 week of 2026