> Markdown version of [/jobs/ext/2258825-identity-platform-owner](https://www.wearedevelopers.com/jobs/ext/2258825-identity-platform-owner). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Platform Owner

- **Company:** Kingfisher plc
- **Location:** London, UK (Remote available)
- **Contract:** Permanent contract
- **Skills:** Active Directory, OpenID, Public Key Infrastructure, Azure Active Directory, Security Assertion Markup Language (SAML)
- **Published:** August 26, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/identity-platform-owner/45145129

## About the Role

decommissioning of legacy identity services. Oversee PKI governance, certificate lifecycle management and machine and workload identity services, setting clear operational standards. Use service metrics, operational insight, audit findings and incident learnings to drive continuous improvement across identity platforms. Strong hands on experience with Active Directory, Microsoft Entra ID and hybrid identity environments. Proven experience designing, implementing and governing Conditional Access, MFA and passwordless authentication, and federation technologies (OIDC/SAML). Practical knowledge of PKI, ADCS, certificate lifecycle management and machine or workload identities. Deep understanding of identity security controls, including privileged access management and administrative hardening. Ability to provide senior technical leadership, influencing both technical and non technical stakeholders and clearly explaining risk and impact. How We Work We believe in flexibility and balance. Our

## Description

UK office locations in Paddington, Southampton or Yeovil, with an expectation of 12 days a month in the office. Due to the wider team and stakeholders the role supports mostly being based out of Southampton, we would expect travel to this site on a weekly basis. Own and continuously evolve the technical roadmap for cloud identity, directory infrastructure and PKI / machine identity platforms, ensuring alignment with security and cloud first principles. Act as the senior technical authority for identity platform design, providing clear architectural direction and leadership on complex technical decisions. Ensure the security, resilience, performance and availability of Active Directory, Microsoft Entra ID and hybrid identity services. Govern identity security controls, including Conditional Access, MFA and passwordless authentication, federation technologies and directory access models. Lead modernisation initiatives that improve automation, simplify platforms and support the structured


## Related Videos

- [Backstage in Practice: Offloading Developer Operational Work Through Platform Self-Service](https://www.wearedevelopers.com/videos/1922-backstage-in-practice-offloading-developer-operational-work-through-platform-self-service)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Break the Chain: Decentralized solutions for today’s Web2.0 privacy problems](https://www.wearedevelopers.com/videos/928-break-the-chain-decentralized-solutions-for-today-s-web2-0-privacy-problems)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [ I Gave a Video Editor More Autonomy Than a Trading Bot. On Purpose.](https://www.wearedevelopers.com/magazine/773-i-gave-a-video-editor-more-autonomy-than-a-trading-bot-on-purpose)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)