Security Solutions Architect – IAM

Role Overview

• Support the IAM architectural roadmap, working with security and enterprise architecture to maintain alignment to the broader enterprise security and technology strategies.
• Design end-to-end IAM solutions covering identity governance and administration (IGA), privileged access management (PAM) and access management.
• Establish and maintain architecture patterns, standards, and reference designs for IAM across cloud, hybrid, and on-premises environments.
• Architect and oversee the implementation of authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and FIDO2/WebAuthn.
• Drive the adoption of multi-factor authentication (MFA), single sign-on (SSO), and password-less authentication capabilities, enhancing and extending the conditional access implementation.
• Collaborate with peer functions such as Workplace Technology, Enterprise Architecture, Security Architecture as and when required.
• Engage with relevant teams to ensure IAM solutions comply with relevant regulatory and control frameworks (including GDPR, SOX, PCI-DSS, NIST and ISO 27001).
• Support the analysis & delivery of role-based access control (RBAC), attribute-based access control (ABAC), and entitlement management frameworks.
• Support audit and assurance activities, producing architectural documentation and evidence as required.
• Act as the subject matter expert (SME) for IAM solutions, advising stakeholders and product teams on identity-related risks, capabilities and mitigations.
• Bring a “customer first” mindset to ensure that user experience remains a priority in the delivery of IAM services.
• Evaluate and support recommendations for IAM vendor solutions and tooling, contributing to procurement and commercial decisions.
• Act as a coach or mentor to junior colleagues to further IAM within Flutter.

Requirements

• Degree in Computer Science, Information Security, or a related discipline
• or equivalent demonstrable experience.
• 7+ years in identity and access management or information security roles, with at least 3 years in an architectural or engineering capacity.
• An understanding of federation protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, Kerberos.
• Strong understanding of zero trust network access (ZTNA) and its application to identity architectures.
• Experience designing IAM solutions across multi-cloud environments (AWS, Azure, GCP).
• An understanding of API security patterns, including OAuth token management and API gateway integration.
• Familiarity with Infrastructure as Code (IaC) tooling (e.g., Terraform, Ansible) as applied to identity configuration.
• An understanding of PKI, certificate lifecycle management, and secrets management best practices.
• Architecture experience
• ideally with a grounding in a recognised framework such as TOGAF, SABSA, or Zachman.
• Demonstrable experience working within complex, large-scale enterprise environments with diverse technology stacks.
• Strong understanding of cloud-native architecture patterns, microservices, and containerisation (Kubernetes, Docker).

Tech Stack

• Ansible
• AWS
• Azure
• Cloud
• Docker
• Flutter
• Google Cloud Platform
• Kubernetes
• Microservices
• Terraform

Benefits

• Health insurance
• Flexible working hours
• Professional development opportunities
• Commitment to diversity and inclusion