Jobs in London - Solutions Architect - IAM (We have office locations in Cambridge, Leeds and London) • UK

Company: Genomics England

UK

Job DescriptionHere at Genomics England, we are seeking a highly skilled and experienced Identity and Access Management (IAM) Solution Architect, with specialist knowledge of Okta and a broad knowledge of other related tools such as AWS Identify Centre, NHS CIS2, Azure AD etc. The successful candidate will be responsible for designing, implementing, and managing IAM solutions that leverage Okta's capabilities to ensure secure and efficient access to our systems and applications across our cloud and on-premise estate. You will be a key member of our team working with product managers, engineers and suppliers to determine how our IAM solution evolves as part of GEL’s Cloud Centre of Excellence (CCoE). This Solutions Architect role sits within the Scalable Tech Service and underpins our Healthcare and Research services as well as our operational business functions. Your previous roles will include having designed and implemented large-scale identity and access management solutions with multiple complex cohorts. Key Responsibilities: Work with product, user design and research colleagues to identify and refine required for our IAM and Privileged Access Management (PAM) services. Design and implement IAM/PAM solutions using Okta to meet the organization's security and compliance requirements. Develop and maintain IAM policies, standards, and procedures. Integrate Okta with various applications and systems, ensuring seamless and secure access for users. Provide technical leadership and guidance on IAM best practices and Okta-specific configurations. Collaborate with cross-functional teams to understand business requirements and translate them into effective IAM solutions. Conduct regular security assessments and audits to identify and mitigate potential risks. Stay up-to-date with the latest trends and developments in IAM solutions and technologies to ensure our IAM architecture remains current. Troubleshoot and resolve IAM-related issues, providing timely support to end-users. Develop and deliver training and documentation to ensure effective use of IAM solutions. Essential Skills and Experience: Strong understanding of IAM principles, standards, and best practices. Proven experience as an IAM Solution Architect, with a strong focus on Okta. Architecture and design of a hub-and-spoke identity model using Okta as the central Identity Provider (IdP), with deep integration into AWS Identity and Active Directory environments. Deep knowledge of Okta, primarily as an IdP, but also Okta Zero Trust principles, sign-on policies, workflows. Experience of a wide range of related IAM tools/technologies e.g. AWS Identity Centre, NHS CIS2, SCIM provisioning, SAML, OIDC, OAuth2, Kerberos, LDAP/LDAPS, RADIUS/TACACS+ Ability to design and deliver an enterprise-grade IAM service using Okta, aligned with internal standards and roadmaps. Strong understanding of AD forest/domain design, group policy objects (GPOs), delegation models, and hybrid identity synchronisation with cloud IdPs. Deep understanding of identity governance, including:  Lifecycle management / JML (Joiner-Mover-Leaver)  Access reviews and certification  Federation and posture-aware access  Zero Trust principles and adaptive authentication models.  Strong interpersonal skills with a temperament that builds trust and connection within and across squads through open, honest communication. Comfortable engaging responsively with teams both remotely and in person when required. Ability to navigate rapidly to effective solutions through engaged and inclusive listening, clarity of thought, clear documentation, and succinct presentation. Experience shaping and guiding architectural choices, both tactical as well as long-term architectural strategy and direction. Desirable Skills and Experience: Relevant certifications, such as Okta Certified Professional or Okta Certified Administrator, are a plus. Experience aligning IAM architectures to standards such as ISO27001, NIST, CIS, and regulations such as GDPR. Experience of working in a Cloud Centre of Excellence (CCoE). Experience in healthcare, genomics, or research domains. AWS certifications (e.g., AWS Certified Solutions Architect – Associate/Professional). TOGAF Certification or equivalent