Infrastructure Engineer-Outside IR35
Role details
Job location
Tech stack
Job description
My client, a well known Retail business, is looking for a Senior Infrastructure Engineer with strong experience in identity modernisation, particularly around moving away from Legacy directory services and helping shape a more secure, scalable, cloud first environment.
This is an initial 6 month contract, outside of IR35. It requires 2 days per week in the office.
This role is ideal for someone who has hands-on expertise in Active Directory rationalisation, Legacy LDAP application migration, and the adoption of modern authentication standards such as SAML, OAuth2 and OpenID Connect.
Key Experience Required
- Identity & Directory Modernisation (Core Focus)
- Strong experience with Active Directory deprecation, consolidation, and domain dependency reduction
- Proven track record of assessing and migrating LDAP-based authentication flows to modern identity methods such as SAML, OAuth2 or OpenID Connect
- Solid understanding of Entra Domain Services (EDS) for supporting Legacy workloads without the need for full AD infrastructure
- Experience building identity automation solutions to improve JML processes, reduce technical debt, and remove Legacy directory reliance
- Microsoft Infrastructure
- Strong background across Windows Server, Entra ID, GPO transition work, and identity life cycle automation
- Azure Platform Engineering
Experience deploying and supporting core Azure services, including:
- Azure VMs
- Container Instances
- Function Apps
- Virtual WAN
- Azure Firewall
- Automation Accounts
- Scripting & Automation
- Advanced PowerShell skills with experience automating workflows, reporting, system administration, and identity processes
- Good Python Scripting capability for integrations, data handling, and tooling
- Experience working with REST APIs across cloud and on-prem environments
- DevOps & Infrastructure as Code
- Exposure to Azure DevOps, GitLab, or similar CI/CD tooling
- Working knowledge of Terraform, ideally in live/production environments
Additional/Nice-to-Have Skills
- Google Workspace support or integrations
- VMware vCenter
- Intermediate Linux
- Basic MSSQL
- Citrix, Intune, and thin/edge client technologies (eg Wyse/IGEL)
- Understanding of Zero Trust, Conditional Access, and core networking fundamentals such as DNS, DHCP, PKI, and TCP/IP
The Opportunity
You'll join a strong infrastructure team supporting the move from a hybrid setup to a cloud-first, identity-modernised environment. The role combines proactive engineering, Legacy platform reduction, and some reactive support/on-call responsibilities.
We're looking for someone who is:
- Comfortable working through complex identity transitions
- Calm under pressure
- Strong with stakeholders and able to explain technical concepts clearly
Requirements
My client, a well known Retail business, is looking for a Senior Infrastructure Engineer with strong experience in identity modernisation, particularly around moving away from Legacy directory services and helping shape a more secure, scalable, cloud first environment.
This is an initial 6 month contract, outside of IR35. It requires 2 days per week in the office.
This role is ideal for someone who has hands-on expertise in Active Directory rationalisation, Legacy LDAP application migration, and the adoption of modern authentication standards such as SAML, OAuth2 and OpenID Connect.
Key Experience Required
- Identity & Directory Modernisation (Core Focus)
- Strong experience with Active Directory deprecation, consolidation, and domain dependency reduction
- Proven track record of assessing and migrating LDAP-based authentication flows to modern identity methods such as SAML, OAuth2 or OpenID Connect
- Solid understanding of Entra Domain Services (EDS) for supporting Legacy workloads without the need for full AD infrastructure
- Experience building identity automation solutions to improve JML processes, reduce technical debt, and remove Legacy directory reliance
- Microsoft Infrastructure
- Strong background across Windows Server, Entra ID, GPO transition work, and identity life cycle automation
- Azure Platform Engineering
Experience deploying and supporting core Azure services, including:
- Azure VMs
- Container Instances
- Function Apps
- Virtual WAN
- Azure Firewall
- Automation Accounts
- Scripting & Automation
- Advanced PowerShell skills with experience automating workflows, reporting, system administration, and identity processes
- Good Python Scripting capability for integrations, data handling, and tooling
- Experience working with REST APIs across cloud and on-prem environments
- DevOps & Infrastructure as Code
- Exposure to Azure DevOps, GitLab, or similar CI/CD tooling
- Working knowledge of Terraform, ideally in live/production environments
Additional/Nice-to-Have Skills
- Google Workspace support or integrations
- VMware vCenter
- Intermediate Linux
- Basic MSSQL
- Citrix, Intune, and thin/edge client technologies (eg Wyse/IGEL)
- Understanding of Zero Trust, Conditional Access, and core networking fundamentals such as DNS, DHCP, PKI, and TCP/IP, * Comfortable working through complex identity transitions
- Calm under pressure
- Strong with stakeholders and able to explain technical concepts clearly
