Modern Identity Specialist - London, United Kingdom - UK Health Security Agency

Tom O´Connor

Posted by:

Tom O´Connor

beBee Recruiter


Description
Job title -Modern Identity Specialist

Profession

  • Engineer
Directorate

  • Technology
Full Time equivalent

  • 37.5 hours
No of Roles

  • 2
Contract Type

  • Permanent
Location

  • Home/local office hybrid, with travel to other UKHSA sites as required


UKHSA offers hybrid working or home working for its employees - this means that whilst the role will be based in one of our UKHSA offices, there will be opportunities for an element of working from home.

The balance between home and workplace working is to be agreed with the line manager, determined primarily by business need and in line with departmental policy.

Some business travel will be required to other UKHSA offices. Please be aware that this role can only be worked from within the UK and not overseas. Relocation expenses are not available

Working Pattern

  • Full Time /Flexible Working / Hybrid Working
Grade & Salary -Grade SEO. National banding -£37,056 -£42,481 per annum. Outer London - £38,967- £44,240 per annum. Inner London - £40,876- £45,998 per annum.

New entrants to the Civil Service are expected to start on the minimum of the pay band.

Daily Operational Duties

  • Incident and Request management via ITSM suite.
  • Management and Monitoring of key UKHSA IAM services:
  • Certificate \ PKI lifecycle
  • Entra ID Privileged Access Management
  • Azure Enterprise Applications onboarding and lifecycle
  • SCIM Provisioning and SSO Alignment.
  • Active Directory Domain services, Identity, DNS, GPO etc.
  • Microsoft Direct Access
  • Microsoft ADFS
  • Microsoft Defender for Identity and Server Endpoints
Ongoing alignment of services to best practices with Cyber Security


The Technology Directorate provides business-critical systems and services to UKHSA business users at all locations at which UKHSA staff work.

ICT has primary responsibility for technical infrastructure and the corporate services running upon it. ICT has staff at a number of locations throughout UKHSA.

Main duties and responsibilities

  • Investigate and provide accurate responses to requests for support

For example:

making system modifications, developing work-around enhancements, manipulating data, reconfiguring systems, changing operating procedures, training users or operations staff, producing additional documentation, or escalating requests to systems development staff or software suppliers.


  • Ensure all work is carried out and documented in accordance with required standards, methods and procedures.
  • Ensure documentation is available and securely accessible to relevant parties
  • Creating IAM solution blueprints and producing highlevel designs for technical and process solutions for multiple IAM domains.
  • Managing the designs, development, test, launch, and continuous improvement of UKHSA's identity solutions.
  • Developing an understanding of access needs, and platform progress, leading to improvements on UKHSA's identity and access policies
  • Manage and monitor systems associated to IAM, Privileged Access Management (PAM), Single Sign-On (SSO)/Federation and Multifactor Authentication (MFA).
  • Enforce security policies and support existing systems in accordance with policies, standards, guidelines, and procedures.
  • Participate in the evaluation, design, development, and implementation of IAM solutions to enhance information systems security and prevent the unauthorized use, release, modification, or destruction of data.
  • Provides an effective interface between users and service providers, including external commercial suppliers where applicable. This interface includes documenting problems, progress checking, and ensuring all diagnostic information is provided for error resolution and incident analysis.
  • Contributes to the availability management process and its operation by reporting on service and component availability, reliability, maintainability and serviceability.
  • Conducts investigations of operational problems and makes proposals for improvement. Participates in reviews of systems performance, provide advice, and assist service specialists or other system or service providers to plan details of amendments and upgrades to systems.
  • Identifies and implements areas of improvement through automation or efficiencies with use of technology.
  • Supports and mentors junior team members and assists in their development to provide an excellent level of service to all customers.
  • Identifies areas of potential security enhancement whilst maintaining an excellent end user working experience.
Essential Experience

  • Experience with Microsoft Azure Active Directory (AD), AD Connect, Multi-Factor authentication
  • Microsoft AZ900 certified or sufficient working experience within Microsoft Azure.
  • Experience of Azure Active Directory, with a good understanding of authentication principals and multicloud identity models.
  • Experience in building and maintaining access management systems with nonMicrosoft technologies such as FreeIPA, OpenAM, AWS Cognito or other OpenID connect,

More jobs from UK Health Security Agency