IT Contractors UK Profile
Nicholas Bec
Senior Technical Consultant | Cloud, IAM & Integration Delivery
Verified email
Founding Contractor · 2026
Contractor snapshot
Primary specialism
Cloud & DevOps
Location / working location
Glasgow
Current availability
Available within 2 weeks
Confirmed 27 Aug 2026
Profile status
Active contractor profile
Professional profile
Accomplished Senior Technical Leader and Azure-Certified Architect with over 11 years of experience driving enterprise-scale cloud transformations, Identity & Access Management (IAM) programmes, and infrastructure automation across financial services and technology sectors. Expertise spans architecting Azure-native IAM Governance solutions, designing no-click-ops Infrastructure as Code using Terraform and Python, and enforcing Zero Trust security frameworks. Proven track record of architecting governance control planes across 2,000+ application estates, automating complex Joiner/Mover/Leaver (JML) workflows, and executing high-impact technical deliveries that reduce operational risk and yield multi-million-pound cost savings. Highly proficient in Entra ID Governance, SAML/OAuth/OIDC integrations, CI/CD pipelines, and multi-cloud platform security.
Core skills
Identity & Access Management (IAM)
Microsoft Entra ID Governance
Terraform
Infrastructure as Code (IaC)
Azure Cloud Services
Privileged Access Management (PAM)
Python
PowerShell
Zero Trust Architecture
Entra
Azure
Kubernetes
Access Control
Integration
Implementation
What I’m looking for next
Target roles: IAM Technical Delivery Lead · Principal IAM Architect · Senior Cloud Platform Engineer · IAM Engineer · Cloud Infrastructure Consultant · Integration Lead · Access Control
Contract preferences
Working preferenceRemote · Hybrid
Will workGlasgow, Manchester, Edinburgh
IR35 preferenceOutside IR35
Expected rate
£550–£600/day
Contract lengthAny contract length
Contracting experience3 years
Relevant work experience
IAM Technical Delivery Lead | Softcat (Apr 2026 – Present) - I architected and led the technical delivery of an Azure-native IAM Governance programme using Entra ID Governance and Terraform across a 2,000+ application estate. Built a Python Azure Functions control plane secured via OIDC federation, delivering an automated, IaC-driven onboarding pipeline that generated over £5M in projected 3-year savings. Identity Implementation Engineer | SwiftConnect (Dec 2024 – Apr 2026) Guided enterprise clients through end-to-end SaaS integration and identity platform deployments. Designed Zero Trust reference architectures, managed Landing Zone creation via Terraform, and engineered custom API, SCIM, OIDC, SAML, and OAuth integrations. Principal Consultant – Cloud Infrastructure Transformation | Pluralsight (Sep 2021 – Dec 2024) Spearheaded enterprise Azure cloud migrations (IaaS, ExpressRoute, AAD/Entra ID, AVD) and platform security assessments. Advanced from Implementation Consultant to Principal, shaping client cloud strategies, optimizing operations through Terraform CI/CD pipelines, and driving DevOps best practices. System Integration Consultant | HID Global (Apr 2020 – Sep 2021) Led global deployments of HID Safe IAM software across Microsoft technology stacks for clients including HSBC and Philip Morris. Implemented SAML/OAuth SSO, built custom PowerShell/SQL automation scripts, and architected physical access control integrations. Identity and Access Management Project Analyst | Virgin Money (Feb 2019 – Apr 2020) Delivered access governance frameworks and automated hybrid JML workflows across Active Directory, Azure AD, CyberArk, Okta, and IBM ISIM. Managed GPOs, OUs, and domain trusts while leading enterprise-wide access certification (attestation) projects.
Experience & credentials
Certifications, sector experience and security clearance are self-declared unless specifically marked as independently verified by IT Contractors UK.
Sector experience
FInancial Services · IT · Learning and Development
Contact details are controlled by the contractor and are not displayed automatically. Profile information is self-declared unless explicitly marked as verified.