Solutions Architect – IAM / Okta
Office locations: Cambridge, Leeds, London.
Company Description
Genomics England partners with the NHS to provide whole genome sequencing diagnostics. We equip researchers to find disease causes and develop new treatments – with patients and participants at the heart of it all. Our mission is to refine, scale, and evolve our ability to enable others to deliver genomic healthcare and conduct genomic research, working with patients, doctors, scientists, government and industry to improve testing and enable new medical discoveries.
Job Description
We are looking for a highly skilled Identity and Access Management (IAM) Solution Architect with deep, hands‑on expertise in Okta and a strong knowledge of related tools such as AWS Identity Centre, NHS CIS2, Azure AD, etc. The successful candidate will design, implement and manage IAM solutions that leverage Okta as the strategic identity platform to ensure secure and efficient access across our cloud and on‑premise estate. You will work with product managers, engineers, and suppliers to shape our IAM strategy as part of GEL’s Cloud Centre of Excellence (CCoE).
Key Responsibilities
* Work with product, user design and research colleagues to identify and refine requirements for IAM and Privileged Access Management (PAM) services, with Okta integration as a core element.
* Design and implement IAM/PAM solutions using Okta to meet security and compliance requirements.
* Develop and maintain IAM policies, standards, and procedures, including Okta‑specific governance and best practices.
* Integrate Okta with various applications and systems, ensuring seamless and secure user access.
* Provide technical leadership and guidance on IAM best practices and Okta‑specific configurations.
* Collaborate with cross‑functional teams to understand business requirements and translate them into effective IAM solutions.
* Conduct regular security assessments and audits to identify and mitigate potential risks.
* Stay up to date with the latest trends and developments in Okta and IAM technologies.
* Troubleshoot and resolve IAM‑related issues, providing timely support to end users.
* Develop and deliver training and documentation to ensure effective use of IAM solutions, including Okta workflows and policies.
Essential Skills and Experience
* Strong understanding of IAM principles, standards, and best practices.
* Proven experience as an IAM Solution Architect with expert‑level, hands‑on Okta implementation at scale.
* Architecture and design of a hub‑and‑spoke identity model using Okta as the central Identity Provider (IdP), with deep integration into AWS IdC and Active Directory environments.
* Deep knowledge of Okta as an IdP, including Zero Trust principles, sign‑on policies, workflows, lifecycle automation, and adaptive authentication.
* Experience with a wide range of related IAM tools/technologies, e.g., AWS Identity Centre, NHS CIS2, SCIM provisioning, SAML, OIDC, OAuth2, Kerberos, LDAP/LDAPS, RADIUS/TACACS+.
* Ability to confidently design, lead and deliver an enterprise‑grade IAM service using Okta as the primary IdP, aligned with internal standards and roadmaps.
* Strong understanding of AD forest/domain design, group policy objects (GPOs), delegation models, and hybrid identity synchronisation with cloud IdPs.
* Deep understanding of identity governance, including:
o Lifecycle management / JML (Joiner‑Mover‑Leaver)
o Access reviews and certification
o Federation and posture‑aware access
o Zero Trust principles and adaptive authentication models
* Strong interpersonal skills, building trust and connection across squads through open, honest communication.
* Comfortable engaging both remotely and in person when required.
* Ability to navigate rapidly to effective solutions through engaged and inclusive listening, clear documentation, and succinct presentation.
* Experience shaping and guiding architectural choices, both tactical and long‑term strategic direction.
Desirable Skills and Experience
* Relevant certifications, such as Okta Certified Professional or Okta Certified Administrator.
* Experience aligning IAM architectures to standards such as ISO27001, NIST, CIS, and regulations such as GDPR.
* Experience in a Cloud Centre of Excellence (CCoE).
* Experience in healthcare, genomics, or research domains.
* AWS certifications (e.g., AWS Certified Solutions Architect – Associate/Professional).
* TOGAF Certification or equivalent.
Qualifications
Bachelor's degree in Computer Science, Information Technology, or a related field; or equivalent experience.
Salary
£93,600
Closing Date
Monday 12th January at 23:00 (UK time)
Benefits
* Generous leave: 30 days’ holiday plus bank holidays, additional leave for long service, and the option to apply for up to 30 days of remote working abroad annually (approval required).
* Family‑friendly: blended working arrangements, flexible working, enhanced maternity, paternity and shared parental leave benefits.
* Pension & Financial: defined contribution pension (Genomics England double‑matches up to 10%, you can contribute more if desired), Life Assurance (3× salary), and a Give As You Earn scheme.
* Learning & Development: individual learning budgets, support for training and certifications, and reimbursement for one annual professional subscription (approval required).
* Recognition & Rewards: employee recognition programme and referral scheme.
* Health & Wellbeing: subsidised gym membership, a free Headspace account, and access to an Employee Assistance Programme, eye tests, flu jabs.
Equal Opportunities and Commitment to Diversity
Genomics England is actively committed to providing and supporting an inclusive environment that promotes equity, diversity and inclusion best practice. We welcome and treat all people with respect regardless of disability, ethnicity, gender, gender identity, religion, sexual orientation, or social background. Non‑discrimination and equity policies apply fairly to all people, irrespective of age, disability, gender identity, marital or civil partnership status, pregnancy or recent parenthood, race, religion or beliefs, sex or sexual orientation, length of service, part‑time or permanent/fixed‑term contract status, or any other relevant factor. We do not tolerate discrimination, harassment, victimisation or bullying at work. Our People policies outline our commitment to inclusivity.
Culture
We have four key behaviours that represent what we want Genomics England to feel like and the culture we want to encourage. These behaviours help us work well together, deliver on outcomes, celebrate successes and share feedback. You can read more about our culture at Culture | Genomics England.
Blended Working Model
We expect most people to come into the office a minimum of two times each month, but this will vary by role and be agreed with your team leader. There is no expectation of full‑time on‑site attendance unless required for specific roles such as lab teams or reception.
Onboarding Background Checks
All successful candidates are subject to a Standard Disclosure and Barring Service (DBS) check. Applicants must disclose any previous offences at the point of application; some unspent convictions may mean we cannot proceed due to the nature of our work in healthcare.
Seniority level
Mid‑Senior level
Employment type
Full‑time
Job function
Engineering and Information Technology
Referral Notice
Referrals increase your chances of interviewing at Genomics England by 2×.
#J-18808-Ljbffr