Platform and Services Engineer - IAM (we have office locations in Cambridge, Leeds and London)

Are you an Engineer who is passionate about Identity and Access Management, automation, AWS cloud technology, and solving complex engineering challenges?

At Genomics England, we’re hiring an IAM Platform and Services Engineer.

This role sits in our high impact Business Systems Team within our Scalable Tech service, working alongside systems administration, cloud platform and IAM engineering specialists. Together, the service provides underpinning infrastructure and guard rails to stream aligned teams across our healthcare and research services.

The IAM Platform and Services Engineer collaborates across Business Systems, Security, Information Governance, Architecture, Software, QA and Platform engineering specialists to design, build and maintain enterprise-wide solutions for Identity and Access Management (IAM) / Authentication, Authorisation and Accountability (AAA).

As an Engineer in the team, you will also be expected to contribute to the Engineering Chapter through enablement, coaching and strategy, working closely with your team and the wider engineering community across the business to help Genomics England build a future-ready cloud platform that will stand the test of time.

This is an engineering role in a truly mission-critical environment, ensuring our platforms are scalable, secure, and efficient. Your knowledge and expertise will really shape the future of our technology; we believe strongly in empowering engineers, fostering an inclusive culture, and giving you the autonomy to make a real impact.

Everyday responsibilities include:

• Design, implement, operate and continuously improve identity and access management policies, processes and controls to ensure access to IT and information resources is managed and controlled effectively and securely, operating within legal and regulatory constraints and meeting business requirements.

• Identity and Access Management (IAM)

• Authentication and Authorisation

• Identity Lifecycle Management

• Integration and Interoperability of solutions within the hybrid cloud and on prem Infrastructure, demonstrating expertise and engineering best practice in respect of infrastructure as code, automation, orchestration, CI/CD, configuration management and a collaborative DevOps culture

• Security, Information Governance and Compliance

• Provide both proactive and reactive operational support, minimising need where possible and simplifying delivery through effective logging, monitoring and knowledge transfer

• Collaborate with a supportive DevOps team to drive automation, efficiency, and continuous improvement.

• Provide support to fellow Platform Engineers with day-to-day changes to our codebase.

• Develop and maintain Engineering Golden Path templates and contribute to engineering enablement across the wider organisation.

• Implement Infrastructure as Code (IaC) to automate deployments and reduce manual effort.

• Influence engineering decisions in a collaborative and inclusive environment that values diverse perspectives.

• Solid expertise in IAM with demonstrable understanding of one or more industry standard IAM protocols, such as Kerberos, OAuth, FIDO, SCIM, LDAP, SAML, OpenID Connect (OIDC)

• Experience building and maintaining solutions for authentication, authorisation and accountability (AAA).

• Knowledge of, and hands-on experience with, industry standard IAM tooling solutions, such as Okta, Auth0, Active Directory and Azure AD (MS Entra ID)

• Some experience administering user access to networks and systems is desirable, including managing user access credentials, maintaining access in line with authorised service requests, and supporting joiner, mover and leaver processes.

• Some awareness of the range of available AWS Security, Identity and Compliance services is desirable

• Exposure to and passion for DevOps best practice, automation, CI/CD and Infrastructure as Code is desirable

• Willingness to learn new skills and technology is a must