> Markdown version of [/jobs/ext/355953-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/355953-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure Engineer - **Company:** Department for Work and Pensions (DWP) - **Location:** Leeds, UK - **Experience:** Expert - **Salary:** £44,447.0 - £52,442.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Application Integration Architecture, User Authentication, Microsoft Azure, Bash Shell, Command-Line Interface, Multi-Factor Authentication, Identity and Access Management, Kerberos (Protocol), OAuth, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Scripting, Enterprise Software Applications, Cyberark, Azure Powershell, Restful APIs, Oracle Cloud Infrastructure - **Published:** June 24, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=73107b5ebfef13e3 ## About the Role Do you have experience in Scripting?, Are you a seasoned infrastructure engineer with a strong focus on Identity security? Do you thrive in a fast-paced environment where innovation and evolution are constant? Excited to work at the forefront of digital identity?, When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria below: * Experience working with Active Directory, Microsoft Entra ID, and multi-factor authentication (MFA) technologies. * Working-level technical knowledge of authentication and authorisation protocols (such as Kerberos, SAML, OAuth 2.0, and OpenID Connect). * Proven experience onboarding and integrating applications with Entra ID, including the configuration and management of Enterprise Applications. * Practical experience using scripting and command-line tools to automate identity operations, including PowerShell, Bash, and Azure CLI. * Experience implementing, supporting, or operating Privileged Access Management (PAM) solutions and role-based access control (RBAC), for example Azure Privileged Identity Management (PIM) or CyberArk PAM. * Practical experience of secrets management technologies and secure handling of credentials. * Experience working within large enterprise environments, including collaboration across multi-supplier and partner-led delivery models., You must meet the security requirements before you can be appointed. The level of security needed is security check. You must have resided continuously in the UK for at least 3 of the last 5 years, 2 of which must have been the immediately preceding years from the point of applying for this job. ## Description As an Infrastructure Engineer, you will: * Be responsible for the implementation and support of enterprise identity platforms, including Active Directory, Entra ID, and federated authentication services. * Manage and optimise SSO, MFA, PAM, PIM, IAM, and PKI capabilities, supporting secure authentication and authorisation for human and non-human identities, including applications, workloads, service accounts, and automated processes. * Have Key responsibilities include Certificate Lifecycle Management (CLM), managing encryption keys, certificates, and secrets, and ensuring the secure operation of secrets management platforms. * Integrate identity and cryptographic services with cloud platforms such as Azure, AWS, and Oracle Cloud Infrastructure (OCI), enabling secure workload identity and service-to-service authentication across environments. * Automate identity and encryption operations using PowerShell, REST APIs, and infrastructure-as-code techniques, improving reliability, security posture, and operational efficiency. * Support the delivery of a new Identity Governance and Administration (IGA) capability. * Contribute to the design and implementation of governance controls, policy enforcement, access reviews, and lifecycle processes covering both human and non-human identities, helping to strengthen compliance and reduce organisational risk. * Work closely with cross-functional teams to deliver identity and trust services that align with security standards, architectural principles, and business needs. While not essential, experience in the following would be beneficial when starting the role: * Experience operating identity, secrets, and encryption services in secure, enterprise-scale environments., The Civil Service values honesty and integrity and expects all candidates to abide by these principles. Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words. Applications will be screened and if evidence of plagiarism or copying examples/answers from other sources is found, your application will be withdrawn. Internal DWP candidates may also face disciplinary action. Feedback will only be provided if you attend an interview or assessment. Security Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check . See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk)