Identity Platform Engineer - SC Cleared

CBSbutler Holdings Limited trading as CBSbutler; Reading; On-site; GBP 100,000 - 125,000; Full time

Job summary

A leading technology recruitment agency in the UK seeks an Identity Platform Engineer. The role involves configuring identity solutions on-premise while collaborating with various teams to ensure effective integration. Candidates should have proven experience with Microsoft identity technologies, particularly Windows Server 2022 and ADFS, and be able to provide operational support. The position offers hybrid working flexibility and competitive pay between £580 to £630 Inside IR35.

Qualifications

• Experience in Defence sector is essential.
• Proven track record as an Identity Engineer, Infrastructure Engineer, or Systems Administrator focused on Microsoft identity technologies.
• Hands-on expertise in server installation, configuration, and management.

Responsibilities

• Implement and configure a new on-premise identity solution.
• Collaborate with various teams to ensure integration of identity infrastructure.
• Provide ongoing operational support including incident resolution.

Skills

AD

ADFS

SSO

RBAC

Tools

Windows Server 2022

PowerShell

VMware

Job description

Identity Platform Engineer

+ SC Cleared role
+ Initial 12 month duration
+ Working hybrid from Berkshire
+ £580 to £630 Inside IR35

Key Skills

• AD, ADFS
• SSO, RBAC

Key Duties and Responsibilities

Implement and configure a new on-premise identity solution built on Microsoft Windows Server 2022, Active Directory (AD), and Active Directory Federation Services (ADFS).
Work from solution designs to deploy and integrate identity components across environments, ensuring resilience, performance, and security.
Configure and maintain federation services with other on-premise identity providers, supporting secure authentication and trust relationships.
Implement Single Sign-On (SSO) and Role-Based Access Control (RBAC) in line with architectural and security requirements.
Collaborate with networking, security, and application teams to ensure the identity infrastructure integrates effectively with dependent systems.
Develop and maintain technical documentation, including configuration guides, deployment procedures, and support manuals.
Participate in testing, validation, and transition to operations, ensuring smooth handover and readiness for live support.
Provide ongoing operational support, including incident resolution, change management, patching, and performance optimisation.
Contribute to continuous improvement by identifying opportunities for automation, hardening, and enhanced monitoring of identity services.

Required Competencies

• Experience of working in Defence
• Proven experience as an Identity Engineer, Infrastructure Engineer, or Systems Administrator with a focus on Microsoft identity technologies.
• Hands‑on expertise in:
• Windows Server 2022 installation, configuration, and management.
• Active Directory design, replication, Group Policy, and security.
• ADFS deployment and configuration, including claims‑based authentication and trust establishment.
• Experience federating with on‑premise identity providers using standards such as SAML, OAuth 2.0, and OpenID Connect.
• Practical understanding of SSO implementation, RBAC, and secure authentication practices.
• Good understanding of networking fundamentals (DNS, routing, load balancing, firewalls) and how they impact identity infrastructure.
• Ability to follow architectural direction and deliver high‑quality technical solutions in a collaborative team environment.
• Experience supporting complex enterprise environments, including troubleshooting identity‑related issues.
• Experience in utilising multiple on‑premise virtualisation technologies such as VMware Cloud Foundation and private cloud stacks.

Desired Competencies

• Microsoft Certified: Identity and Access Administrator Associate or equivalent.
• Experience with PowerShell scripting for automation and operational support.
• Familiarity with monitoring and alerting solutions for Active Directory and ADFS.
• Exposure to hybrid identity models integrating on‑premise and cloud environments.
• Detail‑oriented and methodical in implementation and documentation.