Responsibilities
- Provide endtoend engineering and technical design leadership across enterprise Identity and Access Management initiatives
- Produce and maintain HighLevel Designs HLDs LowLevel Designs LLDs Architecture Decision Records ADRs and supporting technical documentation
- Define endtoend technical solutions across business application data security and infrastructure domains
- Translate business security regulatory and nonfunctional requirements into secure and supportable identity solutions
- Develop reference architectures reusable patterns technical standards and design guardrails
- Define integration patterns between identity platforms applications cloud services and infrastructure components
- Design cloudnative identity solutions for GCP and Kubernetes environments
- Define authentication authorization and identity federation architectures
- Design Human Identity Agent Identity Workload Identity and NonHuman Identity capabilities
- Define Zero Trust architecture security boundaries and trust relationships
- Design API security servicetoservice authentication and workload authentication patterns
- Develop eventdriven integration architectures using messaging and asynchronous processing
- Design Policy Decision Point PDP and Policy Enforcement Point PEP architectures using PolicyasCode
- Define secrets management PKI certificate lifecycle and cryptographic integration patterns
- Design solutions for High Availability resilience scalability performance and Disaster Recovery
- Conduct solution assurance and technical design reviews across internal and supplierdelivered solutions
- Support Architecture Review Boards Design Authorities and technical governance forums
- Identify and manage technical risks assumptions constraints dependencies and design decisions
- Collaborate with Enterprise Architecture to ensure alignment with strategic and targetstate architectures
- Work with Product Owners to refine technical requirements delivery priorities and product roadmaps
- Guide engineering teams throughout implementation testing deployment and productionreadiness activities
- Mentor engineers and promote secure engineering practices technical standards and design consistency
- Evaluate emerging technologies and vendor products against programme and architectural requirements
- Contribute to roadmap planning technology strategy and futurestate architecture
To be successful in this role you should have
- Strong Enterprise Architecture Solution Architecture or Security Architecture experience
- Deep expertise in Identity and Access Management IAM
- Strong knowledge of Authentication and Authorization architectures
- Experience designing Zero Trust architectures and trust boundaries
- Understanding of Human Identity Agent Identity Workload Identity and NonHuman Identity
- Strong experience with Identity Federation standards including OIDC OAuth2 SAML and SCIM
- Handson architecture experience with Google Cloud Platform GCP
- Strong knowledge of Kubernetes and Service Mesh technologies
- Experience designing secure APIs API Gateways and servicetoservice authentication
- Strong understanding of EventDriven Architecture messaging and asynchronous processing
- Experience with PolicyasCode technologies such as OPA and Cedar
- Strong understanding of PDP and PEP authorization architecture
- Knowledge of PKI Certificate Lifecycle Management and Secrets Management
- Experience designing DevSecOps and CICD integration patterns
- Strong knowledge of High Availability Disaster Recovery resilience scalability and performance design
- Experience creating HLDs LLDs ADRs reference architectures and design standards
- Strong Architecture Governance and Solution Assurance experience
- Ability to identify and manage technical risks dependencies constraints and assumptions
- Experience reviewing supplier designs and thirdparty technology solutions
- Strong stakeholder management and technical leadership skills
- Ability to communicate complex architecture decisions to both technical and nontechnical audiences
- Experience mentoring engineers and guiding implementation teams
- Proven experience delivering complex solutions in large global enterprise environments
3 Most Important Skills Critical for Success
- 1 Enterprise IAM Architecture including Authentication Authorization Identity Federation Human Identity Agent Identity and Workload Identity
- 2 EndtoEnd Solution Design including HLDs LLDs ADRs reference architectures technical governance and solution assurance
- 3 CloudNative Security Architecture across GCP Kubernetes API Security Zero Trust PolicyasCode PKI and Secrets Management
Skills
Mandatory Skills : Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Architecture Principle Design
