Security Identity and Access Management Specialist - Home-Based

ISR Recruitment

1d • Remote

About The Position

We are seeking an experienced Security Identity and Access Management Specialist to support the delivery of a secure, scalable and interoperable data-sharing infrastructure that allows organisations in different sectors to manage and exchange information securely while maintaining control over their own data. This role is supporting a major public-sector organisation delivering a large-scale digital transformation programme - replacing legacy systems with a modern, integrated solution that will significantly enhance operational capability across critical services.

Requirements

• Proven security architecture experience on complex federated enterprise solutions.
• Strong knowledge of federated identity, trust frameworks (e.g. Zero Trust) and IAM.
• Strong understanding of cloud, API and distributed system security.
• Practical experience with OAuth2, OpenID Connect, SAML and SCIM.
• Practical experience designing ABAC and policy-based access control solutions.
• Practical experience with Open Policy Agent and policy-as-code solutions at scale.
• Practical experience HMG security assurance (e.g. NCSC Cyber Assessment Framework).
• Ability to produce high-quality architecture and security design documentation.
• Ability to translate complex security concepts for technical and non-technical audiences.
• Comfortable working with ambiguity and shaping emerging requirements.

Nice To Haves

• Experience with federated data-sharing platforms or data ecosystems.
• Ontologies, semantic data models or knowledge graphs.
• Public sector, regulated industry, critical infrastructure or federated ecosystem solutions.

Responsibilities

• Design security Non-Functional Requirements.
• Lead on service wide threat modelling.
• Define and implement ABAC and policy-as-code approaches using Open Policy Agent.
• Define patterns for discovery, access requests, policy enforcement and auditability.
• Design integration with identity providers, IAM platforms and node-level services.
• Support testing, validation and pilot activities to ensure consistent policy enforcement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed