Summary
✨ AI‑Generated
Join an enterprise cloud engineering team for a 12-month engagement focused on designing, automating, and operating secure identity platform services. You will work with modern authentication and authorization patterns, develop scalable identity capabilities, and collaborate with engineering, product, customer, and vendor teams. Active UK security clearance is required.
Highlights
Work on secure, scalable identity services in a product-focused engineering environment, with modern authentication technologies and opportunities to collaborate with engineers, product owners, customers, and vendors.
Description
Role is for 12 monthsMUST HAVE AN ACTIVE SC CLEARENCETravel to the Telford Regional Centre will be required around once a month.
Location can be in any one of our HMRC regional centres.
We’re looking for experienced Senior DevOps Engineers to join HMRC’s Enterprise Cloud Services (ECS) team, working within product teams to design, build, automate and operate identity platform services.
You will play a key role in delivering secure, scalable identity services, working closely with engineers, product owners, customer groups and vendors to enable secure integration of applications and services across HMRC using modern authentication and authorisation approaches.
As a Senior DevOps (Platform Engineer) within HMRC’s Enterprise Cloud Services (ECS), you will be responsible for the engineering, automation and operation of identity services, with a strong focus on Microsoft Entra ID and modern authentication patterns.
Working in a product-centric development environment, you will bring strong DevOps and engineering skills to build and operate identity services and integration patterns, enabling secure access across applications, APIs and platforms.
As an experienced DevOps/platform engineer, you will act as a technical specialist and mentor to developers, adopting an agile approach to delivery where new services or improvements are delivered collaboratively and incrementally to realise business value at the earliest opportunity.
Essential Criteria -
Hands-on experience with Microsoft Entra ID, including: App Registrations, Enterprise Applications, Permissions and access modelsStrong understanding of modern authentication and authorisation protocols, including: OpenID Connect (OIDC), OAuth 2.0, SAML 2.0Ability to assess application requirements and determine the appropriate authentication and SSO solutions,Understanding of how applications authenticate and authorise using tokens, including: Delegated (user-based) access, Application (service-to-service) access.Understanding of Microsoft Graph API authentication and authorisation, including scopes and permission models.Knowledge of API security principles, including REST-based services and secure access patterns.Knowledge of digital certificates, including their use for: Encryption, Signing and validation of tokens.Experience working with automation and DevOps tooling, including:CI/CD pipelines, Infrastructure as Code (e.g.
Terraform), Scripting (PowerShell, Python, Go or Bash).Experience producing clear technical documentation to support repeatable deployment and operation.Experience supporting and troubleshooting application and service integrations within an identity platform.
