Infrastructure Engineer

Department for Work and Pensions (DWP); Lancashire; On-site; GBP 65,000 - 95,000; Full time

Job summary

Department for Work and Pensions (DWP) seeks a Senior Infrastructure Engineer to lead enterprise-scale identity services across on-premises and cloud environments. You will shape identity governance, strengthen Zero Trust, and modernise access management while collaborating with Security, Architecture, DevOps, and supplier teams.

You will design secure identity solutions, enhance JML processes, and support privileged access capabilities using tools like Microsoft Entra PIM and CyberArk,

Qualifications

• Experience delivering enterprise-scale identity services across on-prem and cloud platforms.
• Strong leadership skills and ability to drive security initiatives.
• Proven track record implementing identity governance and access management controls.

Responsibilities

• Provide technical leadership for enterprise-scale identity services across on-premises and cloud platforms.
• Help deliver DWP's identity strategy by strengthening identity governance and Zero Trust.
• Design and implement secure identity solutions and automate JML processes.

Skills

Identity governance

Technical leadership

Security experience

Tools

Azure

AWS

OCI

Microsoft Entra ID

CyberArk

PIM

Job description

The Identity Team delivers authentication, authorisation and identity governance services across DWP, supporting both human and non-human identities. Built on Microsoft Active Directory and Microsoft Entra ID, the team is responsible for critical identity capabilities including Identity Governance and Administration (IGA), Joiner-Mover-Leaver (JML) processes, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Single Sign-On (SSO), PKI, certificate and secrets management. As a Senior Infrastructure Engineer, you will:

• Provide technical leadership for enterprise-scale identity services across on-premises and cloud platforms, including Microsoft Azure, Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI).
• You will help deliver DWP's Identity strategy by strengthening identity governance, advancing Zero Trust principles, modernising access management capabilities, and improving the security and resilience of critical services.
• Work closely with Security, Architecture, DevOps, SRE and supplier teams, you will design and implement secure identity solutions, enhance JML processes through automation, and support privileged access capabilities using technologies such as Microsoft Entra Privileged Identity Management (PIM) and CyberArk.

This is a unique opportunity to play a pivotal role in shaping the future of Identity and Access Management across one of the UK's largest and most complex IT environments. You'll help drive innovation, influence strategic direction and make a real impact on services used by millions. Please note: This role will require participation in an on call rota, which would involve occasional work outside normal business hours. Further details will be provided to successful candidates during the recruitment process.

Please note this role requires you to pass Security Check clearance. For further information, please see 'Selection process details'.

Technology Services provide the foundations upon which digital services for Department for Work & Pensions (DWP) are developed and operate. Our purpose is to deliver secure, effective, and cost-efficient digital infrastructure services and to run live IT operations that support DWP business objectives. We do this by putting users and quality of service at the heart of what we do. Our team is made up of 1,500 colleagues working collaboratively across 10 portfolio led teams in a fast moving environment. Our teams deliver an end-to-end suite of digital products and services that support DWP colleagues and citizens in an ever-evolving technology landscape. Our work is focused around the following 6 themes:

• Delivering a digital workplace that improves the way we work.
• Delivering high-quality and resilient IT services and support.
• Building a world-class performance-focused user experience control centre.
• Exploiting and enhancing hybrid cloud services.
• Protecting and securing our services.
• Developing our people, capability and skills.