Salary: £62,000 - 90,000 per year Requirements: Extensive experience in security architecture with deep IAM, preferably within the Financial Services Industry. Proven experience in designing and implementing IAM solutions. Deep understanding of cloud security architecture and control (AWS, Azure). Experience with modern authentication protocols (OAuth 2.0, OIDC, SAML) and fraud prevention technologies. Extensive knowledge and expertise on securing mobile apps, API transactions, and system integrations with optimal combination of security capabilities. Knowledge of application cryptography, PKI infrastructure, and use of mobile TEE. Strong communication and stakeholder management skills, with the ability to translate complex technical concepts for non-technical audiences. Ability to work under pressure in a fast-paced, transformation-focused environment. Bachelors degree in computer science, Information Security, or related field. Relevant certifications (highly desirable) Certified Professional - Ping*, CyberArk Sentry, Certified Identity and Access Manager (CIAM), AWS Certified Security Specialty, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), Microsoft Certified: Identity and Access Administrator Associate (SC-300). Responsibilities: Lead the development and evolution of enterprise IAM frameworks and patterns for customer-facing and workforce identity solutions across various environments. Drive zero-trust architecture adoption and security-by-design principles across all product development and engineering initiatives. Provide thought leadership in cloud IAM, federated identity, privileged access management, and identity governance for hybrid multi-cloud environments. Design and oversee robust IAM architectures spanning on-premises, colocation, SaaS, AWS, and Azure environments. Develop reference architectures for modern authentication protocols and passwordless authentication flows. Review and approve identity designs for critical systems, including API security and customer authentication journeys. Establish controls for identity lifecycle, access governance, and privileged account management. Align IAM architecture with agile delivery, DevSecOps practices, and infrastructure-as-code approaches. Design identity controls enabling risk-based authentication, adaptive MFA, and continuous authorisation. Develop migration strategies from legacy IAM systems to modern cloud-native platforms. Participate in security governance forums, design authority, and architecture review boards. Conduct IAM assessments and ensure regulatory compliance through identity controls and access certification. Technologies: API AWS Azure Cloud Cryptography DevSecOps IAM Mobile OAuth SAML Security Sentry Active Directory Architect Support LDAP Network More: We are a rapidly evolving financial services organisation based in Bristol, committed to securing our digital future amidst significant transformation. We offer a permanent, full-time role with a hybrid flexible working pattern. Our company culture is rooted in service, quality, innovation, and opportunity, creating a learning-focused workplace. We offer a discretionary annual bonus, 25 days holiday plus bank holidays, enhanced parental leave, and various health and wellness benefits. We celebrate diversity and encourage applications from all individuals. last updated 5 week of 2026