Security Solution Architecture
Core
Define and own end-to-end Identity and Access Management (IAM) reference architectures for OFFICIAL and SECRET domains, including enclave segregation, trust models, and boundary controls.
Role type
Senior Security Solution Architect (Identity & Access Management)
Builds
Authoritative identity sources, golden record schemas, lifecycle policies, RBAC/ABAC models, entitlement catalogues, and privileged access patterns.
Domain
Defence sector, mixed classification environments, Zero Trust, regulated security frameworks (ASP 240, JSP, NCSC, ISO 27001)
Required skills
IAM reference architecture design, Active Directory multi-forest consolidation, DNS/PKI management, MFA/passwordless implementation (FIDO2, smartcards), Zero Trust identity controls, RBAC/ABAC modeling, policy as code, security documentation (HLD/LLD), risk modeling (STRIDE/ATT&CK), legacy estate modernization (ADFS to OIDC/SAML), cross-domain identity patterns for air-gapped environments.
Preferred skills
Defence sector experience, mixed classification environment expertise, alignment with defence assurance and accreditation expectations.
Technologies
Active Directory, DNS, PKI, HSMs, FIDO2, YubiKey, Smartcard/PIV, CAC, Kerberos, NTLM, CyberArk, Beyond Trust, OIDC, SAML, ADFS, NIST SP 800-63, NIST SP 800-207.
Responsibilities
Design authoritative identity sources and golden record schemas; Specify RBAC/ABAC models and entitlement catalogues; Architect MFA/passwordless and Conditional Access solutions; Map designs to ASP 240 and JSP guidelines; Produce HLD/LLD, Control Matrices, and Security Cases; Coach engineering teams on guardrails and DevSecOps integration.
Seniority
Senior, hands-on IC
