Principal Digital Identity Engineer

Employer   Parliamentary Digital Service Directorate   Platforms Band / Grade   A1 Salary   £68,900 - £81,879 (Exc. £5000 MSA) Contract Type   Permanent Location   Hybrid (on-site and remote) Security Level   Security Check (SC) Interview Format   Panel Interview (Remote) Job Description   A1 - Principal Digital Identity Engineer - JD.docx – 3756KB Opens in a new window
Converted File A1 - Principal Digital Identity Engineer - JD.docx.pdf – 1836KB Opens in a new window Additional File   Candidate Information Pack (2).pdf – 1172KB Opens in a new window  

The Opportunity

Parliamentary Digital Services are seeking a highly skilled and experienced Principal Engineer: Digital Identity to join our team within the Platforms Directorate. As the Principal Engineer for Digital Identity, you will play a critical role in the design, implementation, and maintenance of core infrastructure platforms. You will provide expert technical guidance and leadership to ensure secure, highly available, reliable, and performant digital identity platforms, enabling both Houses of Parliament to meet their strategic and business objectives.

You will have

- You are a technical subject matter expert with hands-on operational experience and can demonstrate the following key technical knowledge: 

• Digital identity management and lifecycle utilising RBAC, PIM, PAM, CCM, etc.
• Management and implementation of Active Directory, AD management tools such as Active Roles, and Azure AD.
• Public and Private Cloud IAM (Identity & Access Management). Familiarity with IaaS, PaaS solutions such as Entra ID and AWS as well as securing SaaS.
• Single Sign-on and Federation using standard protocols and frameworks such as Kerberos, SPNEGO, SAML 2.0, ADFS, OpenID Connect, Azure AD B2B and B2C, etc.
• Public Key Cryptography PKI and administration of Certification Authority services.
• Modern Authentication techniques and Device Authentication & Profiling. 
• Remote Access Solution such as Windows Direct Access and/or Always On VPN.
• Zero Trust Architecture concepts for Identity and Access Management.
• PowerShell scripting would be desirable.

- You set the technical direction, developing strategy, and supporting roadmaps which strive for continuous improvement of digital identity services. You are a highly effective leader with experience of building and maintaining a high performing and actively engaged team, whilst upholding the values of equality, diversity, and inclusion. You have recent experience of leading a team and building a supportive and collaborative team culture, empowering others to take ownership, deliver and develop.

- You have an expert level of experience in successfully managing digital identity platform lifecycle and the ability to resiliently respond to cyber security threats. You implement highly effective operational & BCDR plans, ensuring a robust and resilient approach for digital identity, utilising external suppliers where appropriate.

- You can think creatively, ask the right questions, and critically evaluate and communicate findings to a larger team, sometimes working through conflicting information. You can lead investigative work into problems and opportunities in existing processes and create recommendations for improvements. You make decisions at the appropriate time, considering the needs of the situation, priorities, constraints, and the availability of necessary information.

- You have first-hand experience of owning relationships with