Role: Lead IAM Technical Architect REF 102761
Contract Length: Until 31/03/27
Location: Remote with occasional travel to Swindon
IR35: Inside
Pay Rate to Intermediary: Market Rate
Security Clearance: BPSS
Spinwell is recruiting for a Lead IAM Technical Architect for an excellent opportunity within the public sector.
RESPONSIBILITIES OF THE LEAD IAM TECHNICAL ARCHITECT
- Define and govern the target-state IAM architecture, covering:
- Identity verification and assurance
- Identity governance & lifecycle (IGA / JML)
- Authentication and access management (AM)
- Privileged access (PAM)
- Customer and citizen identity (CIAM)
- Non-human / machine identity (NHI/MIM)
- Federation and identity trust models
- Lead end-to-end IAM solution design across programmes, ensuring alignment with enterprise architecture and UK Government standards
- Provide design authority and architectural assurance, ensuring solutions are secure, scalable, and aligned to organisational strategy
- Embed secure-by-design principles, integrating identity into risk-based access control and Zero Trust models
- Define identity lifecycle and governance controls, including provisioning, access review, and deprovisioning
- Design integration and federation patterns, enabling secure identity exchange across client, partners, and suppliers
- Develop transition architectures and migration strategies from legacy identity services
- Deliver a phased IAM roadmap aligned to Discovery, Alpha, and enterprise rollout
- Engage senior stakeholders and provide technical leadership and advisory support across business and technology teams
Deliverables
- Enterprise IAM target architecture and design blueprint
- Current-state IAM assessment and risk analysis
- Identity governance and lifecycle (IGA) operating model
- Authentication and access management design (including MFA/passwordless)
- Privileged access management control model
- Identity integration and federation architecture
- Transition and migration architecture
SKILLS/EXPERIENCE OF THE LEAD IAM TECHNICAL ARCHITECT
Technical and Architecture Expertise
- Enterprise IAM architecture across IGA, AM, PAM, CIAM, federation, and NHI/MIM
- Strong experience in Zero Trust architecture and identity-driven access control
- Design of identity lifecycle governance models and audit controls
- Integration and migration architecture across legacy and modern platforms
- Experience with platforms such as:
- Entra ID
- AWS Cognito
- IGA and PAM tooling
Security and Risk Capability
- Strong understanding of modern authentication and assurance models
- Experience embedding risk-based access controls and policy-driven identity
- Ability to translate risk into pragmatic architectural controls
Delivery and Leadership
- Proven delivery of large-scale IAM transformations
- Stakeholder engagement across business, security, and technical domains
- Ability to lead multi-team and supplier delivery environments
- Experience delivering phased roadmaps with measurable outcomes
If you are a Lead IAM Technical Architect, apply now or send your CV to Spinwell!
We welcome all applications regardless of background, in line with our commitment to diversity, equality and inclusion.
Applying to this or any other vacancy advertised by Spinwell Ltd constitutes an agreement for Spinwell Ltd to hold your details for 24 months for the purpose of assessing suitability for the advertised position and to make you aware of any other positions deemed suitable of which You will make you aware by means of either email, text or phone. In line with GDPR regulations you are able to request your details be removed from the company data at any time by emailing us
Disability Confident
As a member of the disability confident scheme, the client guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.