[Hiring] Principal Infrastructure Engineer @Public Sector Resourcing

Role Description

The UK Parliament is seeking a highly experienced Principal Infrastructure Engineer (Identity) to provide technical leadership and hands-on engineering expertise across its enterprise identity and access management services. Working at the heart of a critical national organisation, you will lead the design, security, resilience and evolution of Parliament's identity platforms, ensuring secure and reliable access for thousands of users and services.

• Define and maintain the technical roadmap, engineering standards and best practices for Parliament's identity and access management services, ensuring alignment with security, architecture and operational objectives.
• Lead the design, implementation and continuous improvement of enterprise-scale identity platforms, delivering complex technical changes, migrations and enhancements across Active Directory, Microsoft Entra ID and hybrid identity environments.
• Act as the senior technical authority for identity security, ensuring solutions adhere to Zero Trust principles, least-privilege access models, security policies and audit requirements.
• Identify and address technical debt, improve platform resilience and recovery capabilities, and lead initiatives that strengthen the overall health and performance of the identity estate.
• Provide technical leadership during major incidents, conducting root cause analysis and implementing long-term solutions to complex identity, authentication and access management issues.
• Mentor engineers, raise technical standards and evaluate emerging identity technologies, automation opportunities and modern authentication solutions to support the future evolution of Parliament's Identity services.

Qualifications

• Extensive experience managing and supporting enterprise-scale Microsoft Identity and Access Management environments, including Active Directory Domain Services (AD DS), Microsoft Entra ID and hybrid identity solutions.
• Strong technical expertise in Active Directory, DNS, Group Policy, replication, authentication, single sign-on (SSO), Microsoft Entra Connect and identity lifecycle management processes.
• Experience designing, administering and supporting Enterprise PKI environments, including Microsoft AD Certificate Services (AD CS), certificate management and identity security controls.
• Advanced PowerShell scripting and automation skills, with the ability to troubleshoot complex technical issues, lead high-risk engineering activities and deliver solutions within large-scale Microsoft environments.

Requirements

• Experience delivering Identity and Access Management services within UK Government, Parliament, Arm's Length Bodies or other public sector organisations.
• Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM) and privileged identity solutions.
• Experience implementing passwordless, phishing-resistant authentication methods and Zero Trust security architectures.
• Demonstrable experience mentoring engineers, establishing engineering standards and driving technical capability improvements across teams.

Benefits

• Disability Confident employer, encouraging applications from disabled and neurodivergent candidates.
• Guarantees to interview all candidates who have a disability and meet all the essential criteria for the vacancy.
• Welcomes applications from veterans, service leavers, reservists and military spouses or partners.