Systems Engineer I SSO/LDM/PAMS

Booker | Technology Infrastructure

At Booker, we're building secure, reliable technology that helps our colleagues serve customers better every day. We believe great things happen when everyone feels welcome, supported and able to be themselves at work.

As a Systems Engineer I within the Booker Technology Infrastructure team, you will play a key role in strengthening Booker's cyber security posture through the delivery and support of Identity & Access Management (IAM) controls.

Working closely with internal technology teams and third-party suppliers, you will be responsible for onboarding applications into Booker's Single Sign-On (SSO) platform, supporting Privileged Access Management (PAMS) onboarding activities, and maintaining evidence required to demonstrate compliance against Tesco's Layered Defence Model (LDM).

You will help drive improvements in access governance, authentication controls and privileged access processes, ensuring solutions are delivered in a secure, auditable and operationally effective manner.

The role provides an excellent opportunity to develop expertise in Identity Management, Cyber Security Governance, SSO technologies and Privileged Access Management while contributing to strategic security improvement programmes across Booker.

You will be responsible for

Single Sign-On (SSO)

• Supporting the onboarding of applications into Booker's SSO platform

• Working with suppliers to gather and validate SAML and OIDC configuration requirements

• Assisting with authentication testing and troubleshooting

• Maintaining accurate records of SSO integrations and configuration details

Privileged Access Management (PAMS)

• Supporting onboarding of colleagues, third parties and systems into the Privileged Access Management solution

• Assisting with access reviews and governance activities

• Ensuring privileged access is appropriately controlled, documented and auditable

Layered Defence Model (LDM)

• Supporting system owners in completing LDM assessments

• Collecting, maintaining and organising evidence required for security assurance activities

• Identifying gaps and driving remediation actions to improve compliance scores

• Maintaining system inventories, infrastructure diagrams and supporting documentation

• An understanding of Identity & Access Management principles
• Experience working with or supporting Single Sign-On technologies (SAML, OIDC or OAuth)
• An understanding of Privileged Access Management concepts
• Strong organisational skills with the ability to manage multiple onboarding activities simultaneously
• Experience working with suppliers and stakeholders to collect technical requirements
• Good documentation and evidence management skills
• An understanding of cyber security governance, compliance or audit activities
• Strong communication and problem-solving skills
• A proactive and detail-oriented approach to security and continuous improvement

At Booker, along with being a great place to work and giving you an opportunity to get on in your career, we also offer the following fantastic package of benefits:

• A Booker colleague card with 10% off purchases at Booker and double discount events up to three times a year.
• After 3 months service, a Tesco colleague discount card with 10% increasing to 15% off most purchases at Tesco for a 4 day period after every four-weekly pay day, ie. thirteen times a year. In addition to 10% off at Tesco Cafe and 20% off all F&F purchases.
• 10% off pay monthly & SIM only deals with Tesco Mobile for yourself, along with further great deals through-out the year.
• Up to 30% off car, pet and home insurance at Tesco bank. Terms and conditions apply.
• Free eye test when you spend £50 or more. You can also save 30% when you spend £50 or more on glasses, prescription sunglasses and contact lenses.
• 50% off health checks at Tesco Pharmacy.
• Exclusive access to discounted RAC breakdown cover rates
• An exclusive deals and discounts website saving you money on everyday purchases including a cycle to work scheme.
• After 3 months service, you can join our annual Save As You Earn share scheme which allows you to buy Tesco shares in the future at a discount.
• Retirement savings plan (pension) - save up to 5% and Booker will match your contribution.
• Life Assurance - You are covered for death in service life cover of up to three times annual pay
• Health and Wellbeing support and resources including our 24/7, confidential Employee Assistance Programme and Virtual GP for you and your family.
• A great holiday package

Booker is the UK's leading food & drink wholesaler. We are privileged to serve independent retailers, caterers and small businesses, from locations across the country. We operate over 190 cash and carry branches, eight distribution centres, five Best Food Logistics sites, as well as six support centre locations across the UK. Diversity, equity and inclusion (DE&I) at Booker means that whoever you are and whatever your background, we always want you to feel represented and that you can be yourself at work. In short, we're a place where Everyone's Welcome. We know life looks a little different for each of us. That's why at Booker and Best, we always welcome conversations about flexible working. Some people are at the start of their careers, some want the freedom to do the things they love. Others are going through life-changing moments like becoming a carer, nearing retirement, adapting to parenthood, or something else. So, talk to us throughout your application about how we may be able to support you. We're proud that Booker is a Disability Confide Reference: 57116910