Lead Security Architect – Identity and Access Management (IAM) BUPA

Zip Hustle; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading global healthcare provider is seeking a Lead Security Architect focusing on Identity and Access Management (IAM) in a hybrid work environment based in Greater London. This role involves defining enterprise IAM architecture, integrating IAM solutions across various platforms, and ensuring compliance with security standards. Ideal candidates should have over 7 years of IAM experience, along with hands-on knowledge of Azure AD, Okta, and CyberArk, and possess excellent communication skills. The position offers a range of benefits aimed at promoting wellbeing.

Benefits

25 days holiday

Enhanced parental leave

Company-matched pension scheme

Annual performance-based bonus

Private medical insurance

Qualifications

• 7+ years’ experience in IAM, security architecture, or cloud engineering.
• Proven experience designing and implementing enterprise IAM strategies.
• Hands-on experience with platforms like Azure AD, Okta, SailPoint, CyberArk.

Responsibilities

• Define and maintain enterprise IAM architecture.
• Develop reusable design patterns for IAM services.
• Lead integration of IAM solutions across platforms.

Skills

IAM experience

Security architecture

Cloud engineering

Compliance frameworks

Communication skills

Education

Relevant certifications (SC-300, CIAM, CISSP, CCSP)

Tools

Azure AD

Okta

SailPoint

CyberArk

Kubernetes

Job description

Lead Security Architect – Identity and Access Management (IAM)

Permanent
London / Staines / Manchester (Hybrid Working)

We make health happen

At Bupa, our purpose is simple but powerful – helping people live longer, healthier, happier lives and making a better world. We’re a global healthcare provider and insurer with no shareholders, which means our customers come first in everything we do.

As our Lead Security Architect – IAM, you’ll play a key role in protecting the digital identities of our people, customers, and partners. You’ll help shape and deliver a secure, scalable, and user-friendly identity and access management strategy that supports our digital transformation and keeps our systems safe.

This is your chance to join a team that’s passionate about innovation, security, and making a real difference to people’s lives.

Key Responsibilities

• Define and maintain our enterprise IAM architecture, aligned with Zero Trust principles.
• Develop reusable design patterns and reference models for IAM services like identity lifecycle, RBAC/ABAC, SSO, MFA, and PAM.
• Lead the integration of IAM solutions across cloud, SaaS, and on-prem platforms including Azure, GCP, Kubernetes, and legacy systems.
• Evaluate and select IAM technologies such as Entra ID, Okta, CyberArk, and SailPoint.
• Design scalable identity governance and administration (IGA) solutions for staff, customers, and third parties.
• Collaborate with teams across Cybersecurity, Risk, Engineering, and Compliance to embed IAM controls.
• Stay ahead of emerging trends like decentralised identity and passkeys and guide architectural innovation.
• Provide expert consultancy during audits, incident response, and solution design.
• Support internal and external risk, compliance, and audit reviews.

What We’re Looking For

• 7+ years’ experience in IAM, security architecture, or cloud engineering with a strong IAM focus.
• Proven experience designing and implementing enterprise IAM strategies.
• Strong knowledge of IAM governance, access reviews, and compliance frameworks.
• Hands‑on experience with platforms like Azure AD, Okta, SailPoint, CyberArk, and BeyondTrust.
• Familiarity with identity protocols (SAML, OAuth2, OpenID Connect) and Zero Trust models.
• Experience with hybrid and multi‑cloud environments, including Kubernetes and SaaS integrations.
• Relevant certifications (e.g. SC-300, CIAM, CISSP, CCSP, SABSA) are a plus.
• Excellent communication skills – able to explain complex ideas to technical and non‑technical audiences.
• A passion for continuous improvement and a proactive approach to problem‑solving.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family‑friendly benefits.

Joining Bupa in this role, you’ll receive the following benefits and more:

• 25 days holiday, increasing through length of service, with the option to buy or sell
• Enhanced parental leave
• Company‑matched pension scheme
• Annual performance‑based bonus
• Private medical insurance
• Access to our health assessments and wellbeing services

  Why Bupa

  We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

  We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.

  Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them.

  Time Type: Full time

  Job Area: IT

  Locations: Angel Court, London, Bupa Place, Staines – Willow House