Principle Infrastructure Engineer (Identity)

On behalf of the UK Parliament (UKP), we are looking for a Principle Infrastructure Engineer (Identity) (Inside IR35) for a 4 month contract based REMOTELY across the UK.

Role purpose: 

The UK Parliament is seeking a highly experienced Principal Infrastructure Engineer (Identity) to provide technical leadership and hands-on engineering expertise across its enterprise identity and access management services. Working at the heart of a critical national organisation, you will lead the design, security, resilience and evolution of Parliament's identity platforms, ensuring secure and reliable access for thousands of users and services. This role requires deep expertise in Active Directory, Microsoft Entra ID, hybrid identity and PKI, alongside the technical judgement to lead complex engineering decisions, resolve high-risk issues and drive strategic improvements across the identity estate. As a recognised subject matter expert, you will also mentor engineers, champion best practice and help shape the future direction of Parliament's Identity and Access Management capabilities.

As a Principle Infrastructure Engineer (Identity), your main responsibilities will be:

• Define and maintain the technical roadmap, engineering standards and best practices for Parliament's identity and access management services, ensuring alignment with security, architecture and operational objectives.
• Lead the design, implementation and continuous improvement of enterprise-scale identity platforms, delivering complex technical changes, migrations and enhancements across Active Directory, Microsoft Entra ID and hybrid identity environments.
• Act as the senior technical authority for identity security, ensuring solutions adhere to Zero Trust principles, least-privilege access models, security policies and audit requirements.
• Identify and address technical debt, improve platform resilience and recovery capabilities, and lead initiatives that strengthen the overall health and performance of the identity estate.
• Provide technical leadership during major incidents, conducting root cause analysis and implementing long-term solutions to complex identity, authentication and access management issues.
• Mentor engineers, raise technical standards and evaluate emerging identity technologies, automation opportunities and modern authentication solutions to support the future evolution of Parliament's Identity services.

Essential:

• Extensive experience managing and supporting enterprise-scale Microsoft Identity and Access Management environments, including Active Directory Domain Services (AD DS), Microsoft Entra ID and hybrid identity solutions.
• Strong technical expertise in Active Directory, DNS, Group Policy, replication, authentication, single sign-on (SSO), Microsoft Entra Connect and identity lifecycle management processes.
• Experience designing, administering and supporting Enterprise PKI environments, including Microsoft AD Certificate Services (AD CS), certificate management and identity security controls.
• Advanced PowerShell scripting and automation skills, with the ability to troubleshoot complex technical issues, lead high-risk engineering activities and deliver solutions within large-scale Microsoft environments.

Desirable:

• Experience delivering Identity and Access Management services within UK Government, Parliament, Arm's Length Bodies or other public sector organisations.
• Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM) and privileged identity solutions.
• Experience implementing passwordless, phishing-resistant authentication methods and Zero Trust security architectures.
• Demonstrable experience mentoring engineers, establishing engineering standards and driving technical capability improvements across teams.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident 

As a Disability Confident employer, UKP encourage applications from disabled and neurodivergent candidates. Applications from candidates who identify as having a disability and meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.

DE&I Commitment

UK Parliament guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

As a signatory of the Armed Forces Covenant, UKP welcome applications from veterans, service leavers, reservists and military spouses or partners. Applications from eligible candidates who meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".