Infrastructure Engineer

As an Infrastructure Engineer, you will:

• Be responsible for the implementation and support of enterprise identity platforms, including Active Directory, Entra ID, and federated authentication services.
• Manage and optimise SSO, MFA, PAM, PIM, IAM, and PKI capabilities, supporting secure authentication and authorisation for human and non-human identities, including applications, workloads, service accounts, and automated processes.
• Have Key responsibilities include Certificate Lifecycle Management (CLM), managing encryption keys, certificates, and secrets, and ensuring the secure operation of secrets management platforms.
• Integrate identity and cryptographic services with cloud platforms such as Azure, AWS, and Oracle Cloud Infrastructure (OCI), enabling secure workload identity and service-to-service authentication across environments.
• Automate identity and encryption operations using PowerShell, REST APIs, and infrastructure-as-code techniques, improving reliability, security posture, and operational efficiency.
• Support the delivery of a new Identity Governance and Administration (IGA) capability.
• Contribute to the design and implementation of governance controls, policy enforcement, access reviews, and lifecycle processes covering both human and non-human identities, helping to strengthen compliance and reduce organisational risk.
• Work closely with cross-functional teams to deliver identity and trust services that align with security standards, architectural principles, and business needs.

While not essential, experience in the following would be beneficial when starting the role:

• Experience operating identity, secrets, and encryption services in secure, enterprise-scale environments., The Civil Service values honesty and integrity and expects all candidates to abide by these principles. Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words. Applications will be screened and if evidence of plagiarism or copying examples/answers from other sources is found, your application will be withdrawn. Internal DWP candidates may also face disciplinary action. Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .

See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals

• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Do you have experience in Scripting?, Are you a seasoned infrastructure engineer with a strong focus on Identity security?

Do you thrive in a fast-paced environment where innovation and evolution are constant?

Excited to work at the forefront of digital identity?, When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria below:

• Experience working with Active Directory, Microsoft Entra ID, and multi-factor authentication (MFA) technologies.
• Working-level technical knowledge of authentication and authorisation protocols (such as Kerberos, SAML, OAuth 2.0, and OpenID Connect).
• Proven experience onboarding and integrating applications with Entra ID, including the configuration and management of Enterprise Applications.
• Practical experience using scripting and command-line tools to automate identity operations, including PowerShell, Bash, and Azure CLI.
• Experience implementing, supporting, or operating Privileged Access Management (PAM) solutions and role-based access control (RBAC), for example Azure Privileged Identity Management (PIM) or CyberArk PAM.
• Practical experience of secrets management technologies and secure handling of credentials.
• Experience working within large enterprise environments, including collaboration across multi-supplier and partner-led delivery models., You must meet the security requirements before you can be appointed. The level of security needed is security check.

You must have resided continuously in the UK for at least 3 of the last 5 years, 2 of which must have been the immediately preceding years from the point of applying for this job.

Pulled from the full job description

• Annual leave
• Employee discount
• Employee assistance programme
• Company pension
• Cycle to work scheme, Alongside your salary of £44,447, Department for Work and Pensions contributes £12,876 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

We also have a broad benefits package built around your work-life balance which includes:

• Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
• Generous annual leave – at least 25 days on entry, increasing up to 30 days over time (pro–rata for part time employees), plus 9 days public and privilege leave.
• Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
• Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
• Family friendly policies including enhanced maternity and shared parental leave pay after 1 year’s continuous service.
• Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
• An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women’s Network, National Race Network, National Disability Network (THRIVE) and many more.

Hybrid Working

This role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work.

If a hybrid working arrangement is suitable for the role and for you, you will normally be required to spend a minimum of 60% of your contracted working hours from your DWP office.

If you have a disability, caring responsibilities, or other circumstances that may affect your ability to meet the minimum office attendance requirement, please discuss this with us using the contact details in this advert.

Salary Information

Pay for this role is from £44,447 to £52,442.

The maximum salary for the grade is £46,547, however a Digital Allowance of up to £5,895 per annum is available for exceptional candidates. Digital Allowance is non-salary, and non-pensionable, and is classed as a temporary allowance. It is reviewed annually where it could be retained, amended, or removed.

Our offer to successful candidates will be based on an assessment of your skills and experience as demonstrated at interview.

Existing Civil Servants who secure a new role on lateral transfer will maintain their current substantive salary.

Existing Civil Servants who gain promotion will move to the bottom of the grade pay scale or receive a 10% increase applied to their current substantive salary, whichever is greater.

Any temporary allowances that you are currently in receipt of will not form part of the calculation to determine your pay. Any allowances that are in payment will cease when you move into your new role.

If so, this is a fantastic opportunity to join an exciting dynamic team, delivering cutting-edge Identity and Digital Encryption services to DWP users. You’ll be delivering one of the largest identity infrastructure deployments, powered by cutting-edge technologies and innovative product development. We’re seeking outstanding Infrastructure Engineers with a strong working knowledge of Identity and Access Management (IAM) and digital encryption technologies to join our Identity Services team. This role is critical to delivering secure, scalable, and resilient identity services across DWP’s hybrid infrastructure. This role requires out of hours support on a paid rota, but this will be on a week on week off basis arranged with the other engineers within the team.