Senior IAM Engineer (Azure)

Public Sector Resourcing•London Britain Township, PA

4d•Remote

About The Position

The UK Health Security Agency is seeking a Senior IAM Engineer to act as the lead subject matter expert for Azure identity services within a team of identity specialists. The role supports secure access to sensitive public health systems and involves close collaboration with UKHSA cross-functional teams and third-party vendors. The position is remote within the UK, with occasional office travel, and is offered on a six-month contract. Active SC clearance is essential; candidates must at minimum be willing and eligible to undergo checks. The engineer will configure and operate identity services and related infrastructure across Microsoft Entra ID, Active Directory, and Azure cloud platforms. The role also includes resolving operational incidents and requests, contributing to identity strategy and roadmaps, using diagnostic tools, developing proactive monitoring, supporting colleagues, maintaining operational documentation, and sharing expertise through guidance and training. The role can only be performed within the UK.

Requirements

Strong hands-on experience with cloud-based Microsoft identity services, particularly Entra ID and associated services, including authentication and authorization, conditional access, enterprise application management, Defender for Identity, identity lifecycle, and External ID (B2C).
Experience with core on-premises identity services and hybrid configurations, including Active Directory Domain Services, DNS, Group Policy, and Certificate Services.
Solid understanding of networking concepts, protocols, and security best practices.
Proven ability to diagnose and resolve complex technical issues.
Effective written and verbal communication skills.
Strong analytical and problem-solving capabilities.
Strong knowledge of cloud-based security models and services.
Active SC clearance is essential; at minimum, candidates must be willing and eligible to undergo checks.

Nice To Haves

Experience automating identity services, including infrastructure as code (IaC), PowerShell, and DevOps principles.
Experience with Amazon Web Services identity services.
Experience integrating with GOV.UK One Login or similar CIAM solutions.
Experience building and maintaining access management systems using non-Microsoft technologies such as FreeIPA, OpenAM, or other OpenID Connect, OAuth, or SAML service providers.
Familiarity with ITIL processes for incident, change, and problem management.

Responsibilities

Configure identity services and associated infrastructure to support modern devices within Microsoft Entra ID and Active Directory.
Manage end-to-end delivery of identity services within Azure cloud platforms and drive operational efficiency.
Handle day-to-day identity operations, including incident resolution and service requests.
Contribute to the development and delivery of the identity strategy and roadmap, working with internal and external stakeholders to improve access management across multiple systems.
Use native logging and diagnostic tooling to help resolve modern-device authentication and authorization issues involving UKHSA services.
Assist in developing tooling for proactive monitoring of identity services.
Provide guidance and support to team members, including operational support teams.
Act as the main point of contact for problems, issues, support, and guidance relating to Azure Identity Services.
Author and maintain operational procedure documentation, including knowledge-base articles, for peers and wider support personnel.
Work with infrastructure, security, identity, and application teams to enable secure and seamless integration.
Share skills and knowledge and deliver Azure training to team members and the Technology Directorate.