The Role: Solution Designer
Location: Sheffield, UK
Position Type: Contract Inside IR35
Remote work option Available: 2-3 Days Onsite in a week
Job Description:
In this role, you will:
-
Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities.
-
Define end-to-end Technical Solutions across business, application, data and infrastructure domains.
-
Translate business, security and regulatory requirements into technical solutions.
-
Develop reference architectures, patterns and design standards for the programme.
-
Define integration patterns between identity platforms, applications and infrastructure.
-
Design cloud-native solutions for GCP and Kubernetes environments.
-
Define authentication, authorisation and federation architectures.
-
Design Agent Identity, Human Identity and Workload Identity capabilities.
-
Define Zero Trust security architecture and trust boundaries.
-
Design API security, service-to-service authentication and workload authentication patterns.
-
Develop event-driven integration architectures using messaging and asynchronous processing.
-
Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code.
-
Define secrets management, certificate lifecycle and PKI integration patterns.
-
Design resilience, disaster recovery and high availability architectures.
-
Ensure solutions meet non-functional requirements for security, scalability, resilience and performance.
-
Produce architecture decision records (ADRs) and design documentation.
-
Identify technical risks, assumptions, constraints and dependencies.
-
Collaborate with Enterprise Architecture to ensure alignment with strategic architecture.
Key Skills & Experience
Essential Skills
-
Enterprise Architecture
-
Identity and Access Management (IAM)
-
Authentication and Authorisation
-
Zero Trust Architecture
-
Agent Identity and Workload Identity
-
Identity Federation (OIDC, OAuth2, SAML, SCIM)
-
Cloud Architecture (GCP)
-
Kubernetes and Service Mesh
-
API Architecture and Security
-
DevSecOps and CI/CD