Principle Infrastructure Engineer (Identity)

The UK Parliament is seeking a highly experienced Principal Infrastructure Engineer (Identity) to provide technical leadership and hands-on engineering expertise across its enterprise identity and access management services. Working at the heart of a critical national organisation, you will lead the design, security, resilience and evolution of Parliament’s identity platforms, ensuring secure and reliable access for thousands of users and services. This role requires deep expertise in Active Directory, Microsoft Entra ID, hybrid identity and PKI, alongside the technical judgement to lead complex engineering decisions, resolve high-risk issues and drive strategic improvements across the identity estate. As a recognised subject matter expert, you will also mentor engineers, champion best practice and help shape the future direction of Parliament’s Identity and Access Management capabilities.

As a Principle Infrastructure Engineer (Identity), your main responsibilities will be: . Define and maintain the technical roadmap, engineering standards and best practices for Parliament’s identity and access management services, ensuring alignment with security, architecture and operational objectives. . Lead the design, implementation and continuous improvement of enterprise-scale identity platforms, delivering complex technical changes, migrations and enhancements across Active Directory, Microsoft Entra ID and hybrid identity environments. . Act as the senior technical authority for identity security, ensuring solutions adhere to Zero Trust principles, least-privilege access models, security policies and audit requirements. . Identify and address technical debt, improve platform resilience and recovery capabilities, and lead initiatives that strengthen the overall health and performance of the identity estate. . Provide technical leadership during major incidents, conducting root cause analysis and implementing long-term solutions to complex identity, authentication and access management issues. . Mentor engineers, raise technical standards and evaluate emerging identity technologies, automation opportunities and modern authentication solutions to support the future evolution of Parliament’s Identity services.

Extensive experience managing and supporting enterprise-scale Microsoft Identity and Access Management environments, including Active Directory Domain Services (AD DS), Microsoft Entra ID and hybrid identity solutions. . Strong technical expertise in Active Directory, DNS, Group Policy, replication, authentication, single sign-on (SSO), Microsoft Entra Connect and identity lifecycle management processes. . Experience designing, administering and supporting Enterprise PKI environments, including Microsoft AD Certificate Services (AD CS), certificate management and identity security controls. . Advanced PowerShell Scripting and automation skills, with the ability to troubleshoot complex technical issues, lead high-risk engineering activities and deliver solutions within large-scale Microsoft environments.

Desirable: . Experience delivering Identity and Access Management services within UK Government, Parliament, Arm’s Length Bodies or other public sector organisations. . Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM) and privileged identity solutions. . Experience implementing passwordless, phishing-resistant authentication methods and Zero Trust security architectures. . Demonstrable experience mentoring engineers, establishing engineering standards and driving technical capability improvements across teams.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident As a Disability Confident employer, UKP encourage applications from disabled and neurodivergent candidates. Applications from candidates who identify as having a disability and meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.