Job Description

IT Security Identity and Access Management Specialist

* 6-month contract

* Remote Working

* Outside IR35

* Market Rates (c£600 to £625 per day)

The Opportunity:

We are seeking an experienced Security Identity and Access Management Specialist to support the delivery of a secure, scalable and interoperable data-sharing infrastructure that allows organisations in different sectors to manage and exchange information securely while maintaining control over their own data.

Working across multiple workstreams, you will be responsible for leading the design of security, identity and policy enforcement capabilities, focusing on federated identity, Attribute-Based Access Control (ABAC), policy-as-code and secure data discovery and access.

You will be working closely with architects, governance leads, developers and stakeholders, that will see you translate business, risk and policy requirements into secure, scalable and practical technical solutions.

This role is supporting a major public-sector organisation delivering a large-scale digital transformation programme - replacing legacy systems with a modern, integrated solution that will significantly enhance operational capability across critical services.

Skills and Experience:

* Proven security architecture experience on complex federated enterprise solutions.

* Strong knowledge of federated identity, trust frameworks (e.g. Zero Trust) and IAM.

* Strong understanding of cloud, API and distributed system security.

* Practical experience with OAuth2, OpenID Connect, SAML and SCIM.

* Practical experience designing ABAC and policy-based access control solutions.

* Practical experience with Open Policy Agent and policy-as-code solutions at scale.

* Practical experience HMG security assurance (e.g. NCSC Cyber Assessment Framework).

* Ability to produce high-quality architecture and security design documentation.

* Ability to translate complex security concepts for technical and non-technical audiences.

* Comfortable working with ambiguity and shaping emerging requirements.

Desirable

* Experience with federated data-sharing platforms or data ecosystems.

* Ontologies, semantic data models or knowledge graphs.

* Public sector, regulated industry, critical infrastructure or federated ecosystem solutions.

Role and Responsibilities:

* Design security Non-Functional Requirements.

* Lead on service wide threat modelling.

* Define and implement ABAC and policy-as-code approaches using Open Policy Agent.

* Define patterns for discovery, access requests, policy enforcement and auditability.

* Design integration with identity providers, IAM platforms and node-level services.

* Support testing, validation and pilot activities to ensure consistent policy enforcement.

NB: The successful candidate will be required to undergo a basic level of security clearance before undertaking the assignment (around two weeks’ lead-time).

Applications:

To learn more about this newly created opportunity consulting as a GDS-focused Security Identity and Access Management Specialist for an initial 6-month engagement, operating on a remote-working basis; please call and speak with Edward Laing here at ISR Recruitment or please send through a copy of your latest online profile and/or CV for an immediate call back in the strictest confidence.

Please contact Edward Laing here at ISR to learn more about our client and how they are leading the way in developing the next generation of technical solutions through innovation and transformational technology?