Identity Platform Engineer - SC Cleared

CBSbutler Ltd.; Reading; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading recruitment agency is seeking an Identity Platform Engineer to implement and configure identity solutions in a hybrid environment. The role requires expertise in Active Directory and ADFS, with responsibilities including integration, operational support, and documentation. Ideal candidates will have experience in Defence and a strong technical background in Microsoft identity technologies. The position offers a salary range of £580 to £630 per day inside IR35.

Qualifications

• Deep technical expertise in identity federation and access control.
• Hands-on implementation experience with Microsoft identity technologies.
• Experience working in Defence sector.

Responsibilities

• Implement and configure an on-premise identity solution with Windows Server 2022 and ADFS.
• Collaborate with teams to ensure effective integration of identity infrastructure.
• Provide ongoing operational support and incident resolution.

Skills

AD

ADFS

SSO

RBAC

Tools

Windows Server 2022

PowerShell

VMware Cloud Foundation

Job description

Identity Platform Engineer

SC Cleared role

Initial 12 month duration

Working hybrid from Berkshire

£580 to £630 Inside IR35

Key Skills

• AD, ADFS
• SSO, RBAC

This role requires deep technical expertise, hands-on implementation experience, and a strong understanding of identity federation, authentication, and access control.

Key Duties and Responsibilities

• Implement and configure a new on-premise identity solution built on Microsoft Windows Server 2022, Active Directory (AD), and Active Directory Federation Services (ADFS).
• Work from solution designs to deploy and integrate identity components across environments, ensuring resilience, performance, and security.
• Configure and maintain federation services with other on-premise identity providers, supporting secure authentication and trust relationships.
• Implement Single Sign-On (SSO) and Role-Based Access Control (RBAC) in line with architectural and security requirements
• Collaborate with networking, security, and application teams to ensure the identity infrastructure integrates effectively with dependent systems.
• Develop and maintain technical documentation, including configuration guides, deployment procedures, and support manuals.
• Participate in testing, validation, and transition to operations, ensuring smooth handover and readiness for live support.
• Provide ongoing operational support, including incident resolution, change management, patching, and performance optimisation.
• Contribute to continuous improvement by identifying opportunities for automation, hardening, and enhanced monitoring of identity services.

Required Competencies

• Experience of working in Defence
• Proven experience as an Identity Engineer, Infrastructure Engineer, or Systems Administrator with a focus on Microsoft identity technologies.
• Hands-on expertise in:
  • Windows Server 2022 installation, configuration, and management.
  • Active Directory design, replication, Group Policy, and security.
  • ADFS deployment and configuration, including claims-based authentication and trust establishment.
• Experience federating with on-premise identity providers using standards such as SAML, OAuth 2.0, and OpenID Connect.
• Practical understanding of SSO implementation, RBAC, and secure authentication practices.
• Good understanding of networking fundamentals (DNS, routing, load balancing, firewalls) and how they impact identity infrastructure.
• Ability to follow architectural direction and deliver high-quality technical solutions in a collaborative team environment
• Experience supporting complex enterprise environments, including troubleshooting identity-related issues
• Experience in utilising multiple on-premise virtualisation technologies such as VMware Cloud Foundation and private cloud stacks

Desired Competencies

• Microsoft Certified: Identity and Access Administrator Associate or equivalent.
• Experience with PowerShell scripting for automation and operational support.
• Familiarity with monitoring and alerting solutions for Active Directory and ADFS.
• Exposure to hybrid identity models integrating on-premise and cloud environments.
• Detail-oriented and methodical in implementation and documentation