Hashicorp SME
Location: Manchester or Sheffield
Type: Contract
Day Rate: Inside IR35
Join a Major Cyber Security Transformation Programme
Are you an experienced Design Engineer, Security Architect, or IAM Specialist looking to make a significant impact within a large-scale cyber security and identity transformation initiative?
We are seeking a talented Cyber Security Architect to lead the design of enterprise Identity & Access Management (IAM) and Secrets Management solutions across a complex, highly regulated environment. This role offers the opportunity to influence strategic security direction, shape architecture standards, and deliver innovative solutions that support modern identity services at scale.
The OpportunityAs a Design Engineer, you will own the end-to-end solution design process, producing architecture artefacts and ensuring solutions align with business requirements, architectural principles, security standards, and long-term technology strategy.
You'll work closely with architects, engineers, programme teams, and senior stakeholders to develop solutions that are secure, scalable, resilient, and operationally supportable. Alongside delivering high-quality designs, you will help shape future architecture patterns, influence strategic decisions, and provide technical leadership across key programmes.
This is an excellent opportunity for someone who enjoys operating at the intersection of architecture, cyber security, and enterprise transformation.
Key Responsibilities Architecture & Solution Design- Design and deliver end-to-end technology solutions aligned to business and security requirements.
- Produce and maintain High-Level Designs (HLDs) and supporting architecture documentation.
- Develop and publish architecture patterns, design decisions, and technical standards.
- Translate complex business requirements into robust technical solutions.
- Identify and manage technical risks, issues, and dependencies throughout the project life cycle.
- Ensure solutions balance security, cost, scalability, resilience, and operational supportability.
- Maintain strong documentation standards and architectural governance.
- Present solution designs and recommendations to design authorities and governance boards.
- Collaborate with senior business and technology stakeholders to gain alignment and approval.
- Ensure architectural artefacts undergo appropriate review, challenge, and approval processes.
- Support project governance activities and design assurance reviews.
- Identify, assess, and mitigate technical risks and design challenges.
- Define remediation plans and strategic recommendations.
- Clearly articulate the impact of design decisions and associated risks.
- Manage architecture dependencies across multiple projects and delivery teams.
- Act as a subject matter expert across cyber security and identity domains.
- Provide technical direction to architects, engineers, and analysts.
- Contribute to wider transformation initiatives and strategic planning activities.
- Influence the future direction of security architecture and engineering practices.
You will bring strong technical experience in one or more of the following areas:
- Identity & Access Management (IAM)
- Security Operations & Incident Response
- Cloud Security
- Infrastructure Security
- Application Security
- Data Security
- Network Security
- Vulnerability Management
- Cryptography
You should also possess:
- Broad technology experience across enterprise IT environments.
- Strong understanding of security architecture, risk management, and governance principles.
- experience operating within large-scale transformation programmes.
- Knowledge of security regulations, industry standards, and compliance requirements.
- Ability to communicate complex security concepts to both technical and non-technical audiences.
We are particularly interested in candidates who have experience with:
- Enterprise Secrets Management platforms.
- Privileged Access Management (PAM).
- Workload Identity and Machine Identity solutions.
- Federated Identity and Single Sign-On (SSO).
- Authentication and Authorisation frameworks.
- Enterprise IAM architecture and strategy.
- 3+ years' experience with HashiCorp Vault, ideally within on-premise environments.
- Strong experience integrating applications and platforms with Vault.
- Deep understanding of:
- Vault Secret Engines
- Authentication Methods
- Secrets Consumption Patterns
- 3+ years' experience using Terraform.
- Proven experience designing and developing reusable Terraform modules.
- experience designing and implementing Workload Identity frameworks.
- Ability to define and influence enterprise-wide secrets management strategies.
- Expertise in authentication protocols including:
- OAuth
- SAML
- Kerberos
- Strong troubleshooting and root cause analysis capabilities.
- Degree in Cyber Security, Computer Science, Software Engineering, or a related discipline.
- CISSP, CISM, or equivalent cyber security certification.
- TOGAF, SABSA, or similar architecture certification.
- Additional cloud or identity-related certifications are advantageous.
- HashiCorp Vault
- Terraform
- Jira
- Confluence
- IAM Platforms
- PAM Solutions
- Authentication & Federation Technologies
- Enterprise Architecture Frameworks
This is an opportunity to join a high-profile cyber security transformation programme where you'll shape the future of identity, secrets management, and enterprise security architecture. You'll work alongside experienced architects and security leaders while influencing strategic decisions that impact a complex global organisation.
If you're passionate about cyber security architecture, IAM, and solving large-scale technical challenges, we'd love to hear from you.
Job Title: Hashicorp SME
Location: Manchester, UK
Rate/Salary: .00 GBP Daily
Job Type: Contract
Trading as TEKsystems. Allegis Group Limited, Bracknell, RG12 1RT, United Kingdom. No Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website.
To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website.
We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.