Hashicorp SME

Cyber Security Hashicorp Architect – Identity & Access Management (IAM)

Location: Manchester or Sheffield

Type: Contract

Day Rate: Inside IR35

Join a Major Cyber Security Transformation Programme

Are you an experienced Design Engineer, Security Architect, or IAM Specialist looking to make a significant impact within a large-scale cyber security and identity transformation initiative?

We are seeking a talented Cyber Security Architect to lead the design of enterprise Identity & Access Management (IAM) and Secrets Management solutions across a complex, highly regulated environment. This role offers the opportunity to influence strategic security direction, shape architecture standards, and deliver innovative solutions that support modern identity services at scale.

The Opportunity

As a Design Engineer, you will own the end-to-end solution design process, producing architecture artefacts and ensuring solutions align with business requirements, architectural principles, security standards, and long-term technology strategy.

You'll work closely with architects, engineers, programme teams, and senior stakeholders to develop solutions that are secure, scalable, resilient, and operationally supportable. Alongside delivering high-quality designs, you will help shape future architecture patterns, influence strategic decisions, and provide technical leadership across key programmes.

This is an excellent opportunity for someone who enjoys operating at the intersection of architecture, cyber security, and enterprise transformation.

Key Responsibilities

Architecture & Solution Design

• Design and deliver end-to-end technology solutions aligned to business and security requirements.
• Produce and maintain High-Level Designs (HLDs) and supporting architecture documentation.
• Develop and publish architecture patterns, design decisions, and technical standards.
• Translate complex business requirements into robust technical solutions.
• Identify and manage technical risks, issues, and dependencies throughout the project lifecycle.
• Ensure solutions balance security, cost, scalability, resilience, and operational supportability.
• Maintain strong documentation standards and architectural governance.

Governance & Stakeholder Management

• Present solution designs and recommendations to design authorities and governance boards.
• Collaborate with senior business and technology stakeholders to gain alignment and approval.
• Ensure architectural artefacts undergo appropriate review, challenge, and approval processes.
• Support project governance activities and design assurance reviews.

Risk & Dependency Management

• Identify, assess, and mitigate technical risks and design challenges.
• Define remediation plans and strategic recommendations.
• Clearly articulate the impact of design decisions and associated risks.
• Manage architecture dependencies across multiple projects and delivery teams.

Technical Leadership

• Act as a subject matter expert across cyber security and identity domains.
• Provide technical direction to architects, engineers, and analysts.
• Contribute to wider transformation initiatives and strategic planning activities.
• Influence the future direction of security architecture and engineering practices.

What We're Looking For

Cyber Security Expertise

You will bring strong technical experience in one or more of the following areas:

• Identity & Access Management (IAM)
• Security Operations & Incident Response
• Cloud Security
• Infrastructure Security
• Application Security
• Data Security
• Network Security
• Vulnerability Management
• Cryptography

You should also possess:

• Broad technology experience across enterprise IT environments.
• Strong understanding of security architecture, risk management, and governance principles.
• experience operating within large-scale transformation programmes.
• Knowledge of security regulations, industry standards, and compliance requirements.
• Ability to communicate complex security concepts to both technical and non-technical audiences.

Identity & Access Management experience

We are particularly interested in candidates who have experience with:

• Enterprise Secrets Management platforms.
• Privileged Access Management (PAM).
• Workload Identity and Machine Identity solutions.
• Federated Identity and Single Sign-On (SSO).
• Authentication and Authorisation frameworks.
• Enterprise IAM architecture and strategy.

Essential Technical Skills

• 3+ years' experience with HashiCorp Vault , ideally within on-premise environments.
• Strong experience integrating applications and platforms with Vault.
• Deep understanding of:
  • Vault Secret Engines
  • Authentication Methods
  • Secrets Consumption Patterns
• 3+ years' experience using Terraform .
• Proven experience designing and developing reusable Terraform modules.
• experience designing and implementing Workload Identity frameworks.
• Ability to define and influence enterprise-wide secrets management strategies.
• Expertise in authentication protocols including:
  • OAuth
  • SAML
  • Kerberos
• Strong troubleshooting and root cause analysis capabilities.

Qualifications

Preferred

• Degree in Cyber Security, Computer Science, Software Engineering, or a related discipline.
• CISSP, CISM, or equivalent cyber security certification.
• TOGAF, SABSA, or similar architecture certification.
• Additional cloud or identity-related certifications are advantageous.

Technology & Tools

• HashiCorp Vault
• Terraform
• Jira
• Confluence
• IAM Platforms
• PAM Solutions
• Authentication & Federation Technologies
• Enterprise Architecture Frameworks

Why Apply?

This is an opportunity to join a high-profile cyber security transformation programme where you'll shape the future of identity, secrets management, and enterprise security architecture. You'll work alongside experienced architects and security leaders while influencing strategic decisions that impact a complex global organisation.

If you're passionate about cyber security architecture, IAM, and solving large-scale technical challenges, we'd love to hear from you.

• Keywords: Cyber Security Design Engineer, Security Architect, IAM Architect, Identity & Access Management, HashiCorp Vault, Terraform, Privileged Access Management, Secrets Management, Workload Identity, Security Architecture, OAuth, SAML, Kerberos, Enterprise Security, Financial Services.

Job Title: Hashicorp SME

Location: Manchester, UK

Rate/Salary: 500.00 - 650.00 GBP Daily

Job Type: Contract

Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.