Senior DevOps (Identity Platform Engineer)

HM Revenue & Customs; Telford; On-site; GBP 70,000 - 110,000; Full time

Job summary

HM Revenue & Customs is seeking an experienced Senior DevOps Engineer to design, build, automate and operate identity platform services within the Enterprise Cloud Services team. The role focuses on scalable, secure identity solutions and modern authentication patterns across applications and APIs.

You will mentor developers, contribute to CI/CD pipelines and IaC, and operate identity services with a product-centric, agile approach to deliver business value quickly.

Qualifications

• Hands-on experience with Microsoft Entra ID including App Registrations and Enterprise Applications.

Responsibilities

• Design, build, automate and operate identity platform services.

Skills

Microsoft Entra ID

Authentication & authorization

OIDC/OAuth 2.0/SAML 2.0

Microsoft Graph API

API security

DevOps tooling

CI/CD pipelines

Infrastructure as Code

Scripting (PowerShell/Python/Go/Bash)

Technical documentation

Tools

Terraform

Job description

• Travel to the Telford Regional Centre will be required around once a month.

Location can be in any one of our HMRC regional centres.

We’re looking for experienced Senior DevOps Engineers to join HMRC’s Enterprise Cloud Services (ECS) team, working within product teams to design, build, automate and operate identity platform services.

You will play a key role in delivering secure, scalable identity services, working closely with engineers, product owners, customer groups and vendors to enable secure integration of applications and services across HMRC using modern authentication and authorisation approaches.

As a Senior DevOps (Platform Engineer) within HMRC’s Enterprise Cloud Services (ECS), you will be responsible for the engineering, automation and operation of identity services, with a strong focus on Microsoft Entra ID and modern authentication patterns.

Working in a product-centric development environment, you will bring strong DevOps and engineering skills to build and operate identity services and integration patterns, enabling secure access across applications, APIs and platforms.

As an experienced DevOps/platform engineer, you will act as a technical specialist and mentor to developers, adopting an agile approach to delivery where new services or improvements are delivered collaboratively and incrementally to realise business value at the earliest opportunity.

• Hands-on experience with Microsoft Entra ID, including: App Registrations, Enterprise Applications, Permissions and access models


• Strong understanding of modern authentication and authorisation protocols, including: OpenID Connect (OIDC), OAuth 2.0, SAML 2.0


• Ability to assess application requirements and determine the appropriate authentication and SSO solutions,


• Understanding of how applications authenticate and authorise using tokens, including: Delegated (user-based) access, Application (service-to-service) access.


• Understanding of Microsoft Graph API authentication and authorisation, including scopes and permission models.


• Knowledge of API security principles, including REST-based services and secure access patterns.


• Knowledge of digital certificates, including their use for: Encryption, Signing and validation of tokens.


• Experience working with automation and DevOps tooling, including:CI/CD pipelines, Infrastructure as Code (e.g. Terraform), Scripting (PowerShell, Python, Go or Bash).


• Experience producing clear technical documentation to support repeatable deployment and operation.


• Experience supporting and troubleshooting application and service integrations within an identity platform.