The Role: Solution Designer
Location: Sheffield, UK
Position Type: Contract Inside IR35
Remote work option Available: 2-3 Days Onsite in a week
Job Description:
In this role, you will:
* Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
* Define end-to-end Technical Solutions across business, application, data and infrastructure domains.
* Translate business, security and regulatory requirements into technical solutions.
* Develop reference architectures, patterns and design standards for the programme.
* Define integration patterns between identity platforms, applications and infrastructure.
* Design cloud-native solutions for GCP and Kubernetes environments.
* Define authentication, authorisation and federation architectures.
* Design Agent Identity, Human Identity and Workload Identity capabilities.
* Define Zero Trust security architecture and trust boundaries.
* Design API security, service-to-service authentication and workload authentication patterns.
* Develop event-driven integration architectures using messaging and asynchronous processing.
* Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
* Define secrets management, certificate lifecycle and PKI integration patterns.
* Design resilience, disaster recovery and high availability architectures.
* Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
* Produce architecture decision records (ADRs) and design documentation.
* Identify technical risks, assumptions, constraints and dependencies.
* Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
Key Skills & Experience
Essential Skills
* Enterprise Architecture
* Identity and Access Management (IAM)
* Authentication and Authorisation
* Zero Trust Architecture
* Agent Identity and Workload Identity
* Identity Federation (OIDC, OAuth2, SAML, SCIM)
* Cloud Architecture (GCP)
* Kubernetes and Service Mesh
* API Architecture and Security
* DevSecOps and CI/CD
