Infrastructure Architect (IGA/PAM, BeyondTrust)

Project overview

Contract Infrastructure Architect to produce HLD/LLD and target infrastructure architecture for IGA/PAM platforms, including supporting a BeyondTrust proof of concept and subsequent production rollout. The role partners with Identity, Cyber Security, Network, Windows/AD, Database, Cloud and operations teams to ensure designs integrate with existing on-prem infrastructure, meet security/architecture standards, and transition cleanly into BAU. Strong Active Directory, Windows Server/virtualisation, privileged credential management concepts, and clear diagramming/documentation skills are required.

Responsibilities

• Produce High-Level Designs (HLD) and, where required, Low-Level Designs (LLD) for the underlying infrastructure.
• Work with Identity, Cyber Security, Network, Windows/AD, Database, Cloud and operational teams to ensure designs integrate with the existing environment.
• Provide infrastructure architecture for IGA and PAM platforms.
• Support infrastructure design and technical validation for a BeyondTrust POC.
• Produce the target infrastructure architecture required for the subsequent BeyondTrust production rollout.
• Define infrastructure requirements and integration considerations for OT Active Directory password-management applications.
• Identify infrastructure dependencies, constraints, risks and security considerations.
• Ensure solutions align with organisational security, architecture and operational standards.
• Support technical design reviews and provide architectural guidance through implementation and transition into BAU support.
• Produce diagrams and supporting documentation showing system components, network zones, connectivity, data flows and dependencies.
• Strong background in on-premises infrastructure architecture.
• Experience designing infrastructure for enterprise security or identity platforms.

Requirements

• On-premises infrastructure architecture
• High-Level Design (HLD) and Low-Level Design (LLD) production
• Infrastructure architecture for PAM and/or IGA platforms
• Active Directory (AD) and identity technologies knowledge
• Privileged account, credential and password management concepts
• Windows Server infrastructure design
• Virtualised infrastructure design (virtualization platforms)
• Integration design across Identity, Cyber Security, Network, Windows/AD, Database, Cloud and operations teams
• Infrastructure dependency/risk/constraint identification and security considerations
• Architecture diagrams and documentation (network zones, connectivity, data flows, dependencies)
• Technical design reviews and architectural guidance through implementation/transition to BAU
• Stakeholder engagement across infrastructure, security and application teams

Project details

• Start: flexible
• Remote: onsite
• Location: United Kingdom, GB