Senior Security Infrastructure Engineer

DWP. Digital with Purpose.

• Are you an experienced security focused Infrastructure Engineer?

• Do you want to work with the largest deployment of directory services and hybrid cloud environment?

If so, we are looking for a Senior Infrastructure Engineer to join our dynamic team, responsible for delivering Identity & Digital Encryption services to the DWP user base.

All across DWP, expert Digital teams like ours are using fresh ideas and leading-edge technologies to create innovative, scalable and user-centric digital solutions.

We're changing face of public services used by nearly every person in the UK, at key moments in their lives. The scale of the engineering challenge here is extraordinary, and our purpose is unique. We'd love you to join us.

Design. Work. Projects.

The proficient Identity team oversees all aspects of internal authentication within the DWP infrastructure. The focus revolves around Active Directory/Entra ID, supplemented by various supporting infrastructure components like DNS, Certificate Services (PKI), Modern Authentication (MFA, WHfB), Entra ID Connect, and Single Sign-On technologies. Additionally, the team provides support for a custom-built Identity Management platform that integrates seamlessly with ServiceNow, along with enterprise security systems such as CyberArk PAM and CyberArk Conjur Secrets Management.

Furthermore, in tight collaboration with DevOps/SREs, the Identity team oversees all facets of Identity and Digital Certificates, including access management pertaining to AWS and Microsoft Azure Cloud technologies. This involves utilizing features such as AWS Private CA, Key Management Services, Azure IAM/PIM, MFA, CA Policies, and Enterprise Apps.

What skills, knowledge and experience do I need?

• In depth knowledge of Microsoft Public Key Infrastructure (PKI) including configuration, administration, and certificate lifecycle management skills.
• In depth knowledge and hands-on experience of Active Directory / Entra ID (Azure AD)
• Practical experience in operating within public cloud environments such as AWS and/or Microsoft Azure
• Experience of working with any Privileged Access / Secrets Management systems including but not limited to Entra Privileged Identity Management (PIM), CyberArk PAM, CyberArk Conjur, Azure Key Vault
• Experience in working within large enterprise settings and multi-supplier environments.

Knowledge and experience of the following would be beneficial when starting the role but isn't essential:

• Hardware Security Modules (HSM) management and configuration.
• Customer Cloud Key Management Services (CCKMS).

Details. Wages. Perks.

You'll join us in one of our brilliant digital hubs in Blackpool, Leeds, Manchester or Newcastle, whichever is most convenient for you.

We also have all the tools and tech we need to enable our people to work and collaborate flexibly.

We work a hybrid model with some time at home and some time in a hub.

We offer competitive pay of up to £73,153

You'll be eligible for a brilliant civil service pension with employer contributions worth over £13,000 per year

You'll get a generous leave package rising to 30 days, plus all the usual bank holidays, and the option to take extra days off on flexi leave.

We also have a broad benefits package built around your work-life balance which includes:

• Flexible working, flexi hours and flexi days
• Hybrid working: some time in a hub with the team, some time at home
• Family-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Working in an award-winning environment and culture
• Professional development, coaching, mentoring and career progression opportunities.

Process.

Stage 1: Application

Stage 2: Interview

We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES.

Click apply now to see the full job description and get started with the next step in your career at DWP Digital.