Security Solution Architecture United Kingdom Multiple Locations Multiple Locations

This role defines and owns end-to-end Identity and Access Management (IAM) reference architectures for Official and Secret domains within the Defence Sector. The incumbent designs authoritative identity sources, lifecycle policies, and specific access models such as RBAC/ABAC while integrating Zero Trust principles and cryptographic standards. Key duties include mapping designs to security policies like ASP 240 and JSP guidelines, producing high-level and low-level designs, and coaching engineering teams on guardrails and DevSecOps integration.