Expert IAM Solution Architect – Cloud and Zero Trust Security

As an IAM Solution Architect, you will contribute to a transformative identity and access management program, building secure, scalable identity solutions that bridge modern technology with the complexity of a major financial institution. You will drive innovation and security across the enterprise.

Quick Facts

• Hybrid work model
• Fluent English required
• Only candidates with an existing legal right to work in the European Union will be considered.

Your main responsibilities

• Design high-level and low-level solution architectures for identity capabilities across diverse domains.
• Translate business, security, and regulatory requirements into robust technical solutions.
• Develop reference architectures, patterns, and standards for the program.
• Define integration patterns for identity platforms, applications, and infrastructure.
• Architect cloud-native solutions for GCP and Kubernetes environments.
• Design authentication, authorization, and federation architectures.
• Develop policies for Agent, Human, and Workload Identity capabilities.
• Establish Zero Trust security architecture and trust boundaries.
• Outline API security, service-to-service authentication, and workload authentication standards.
• Create event-driven architectures utilizing messaging and asynchronous processing.
• Support governance with architecture review procedures and design documentation.
• Collaborate with engineering teams to ensure successful implementation, testing, and deployment.
• Mentor engineers and uphold best practices in engineering.
• Evaluate emerging technologies for alignment with project goals and future roadmap planning.

You're ideal for this role if you have

• At least 8 years of enterprise solution architecture experience, specifically in IAM.
• Strong expertise in authentication and authorization design.
• Proven experience with Zero Trust architecture.
• Hands-on knowledge of cloud environments, especially GCP and Kubernetes.
• Skills in identity federation protocols: OIDC, OAuth2, SAML, and SCIM.
• Deep understanding of API architecture, security, and event-driven systems.
• Proficiency in Policy-as-Code (OPA/Cedar), PKI, certificates, and secrets management.
• Experience in designing high availability, resilience, and disaster recovery solutions.
• Strong stakeholder management and technical leadership abilities.

It is a strong plus if you have

• Certification in cloud architecture or security, such as CCSK, CCSP, or AWS/Azure certifications.
• Knowledge of DevSecOps and CI/CD pipelines.