Lead Specialist Engineer (Identity Automation) - UKHSA - SEO
Government Digital & Data -
Location
Birmingham, Leeds, Liverpool or London (Canary Wharf)
About the job
Job summary
The Chief Data Officer (CDO) Directorate provides business-critical systems and services to UKHSA business users at all locations at which UKHSA staff work.
ICT has primary responsibility for technical infrastructure and the corporate services running upon it. ICT has staff at a number of locations throughout UKHSA.
Working for your organisation
We pride ourselves as being an employer of choice, where Everyone Matters promoting equality of opportunity to actively encourage applications from everyone, including groups currently underrepresented in our workforce.
UKHSA ethos is to be an inclusive organisation for all our staff and stakeholders. To create, nurture and sustain an inclusive culture, where differences drive innovative solutions to meet the needs of our workforce and wider communities. We do this through celebrating and protecting differences by removing barriers and promoting equity and equality of opportunity for all.
Please visit our careers site for more information https://gov.uk/ukhsa/careers
Job description
The Lead Specialist Engineer will work within the Specialist Identity and Access Management Team. The team operates an automation discipline which is managed by a Senior Identity and Access Management Architect.
The Lead Specialist Engineer will work with the other team members, who between them will work within specified technical specialties and provide technical expertise in the configuration, implementation and automation of relevant technical areas.
Automation is the cornerstone of all work undertaken by the team, this role will focus heavily on developing and maintaining automated processes that underpin key technologies that are supported by the Identity & Access Management Team;
- Identity Lifecyle
- Windows PowerShell
- Active Directory
- Azure Active Directory \ Entra ID
- DNS
- Group Policy
- Azure Administration
- DHCP
- Microsoft Certification Authority PKI
- End User operating System security policy
- SQL
- Microsoft Defender
- MBAM
- Azure DevOps
The Lead Specialist Engineer will also have experience of administering as many of the above as possible.
Your main responsibilities will include:
- To assist the Senior Security Architect and the Identity and Access Management Team in ensuring that Security and Identity automation services are working, documented and reliable.
- Administration of user accounts for network access, including creation of accounts, modification of user permissions, and removal of accounts of staff leaving the Agency.
- Ensuring the provision of support and service to all customers during scheduled hours.
- Undertake Appropriate system and service Monitoring and Auditing to ensure service state and availability.
- To maintain awareness of technical developments in Security and Identity Management with a view to providing advice to the Senior Security Architect on suitable technical strategies for UKHSA.
- To conduct such work as directed by line management consistently with departmental standards and to agreed time scales.
- To comply with Departmental requirements for staff management activities, including the reporting of all absences and completion of Performance Development processes.
Daily operational duties will include:
- Incident and Request management via ITSM suite.
- Management and Monitoring of existing IAM automation services, predominately focusing on Microsoft PowerShell and Graph API.
- Development, Test and Release of additional Automation services following DevOps principals.
- Maintain Git repositories for IAM services.
- Ongoing alignment of services to best practices with Cyber Security.
This is not an exhaustive list.
Person specification
Essential role criteria
- Formal technical qualification (e.g. MCP, MCSA\E) or equivalent relevant experience in a similar senior engineer role
- Demonstrable PowerShell scripting / Automation knowledge and experience
- Substantive experience in a technical support role, supporting Microsoft Windows Server Operating System based Identity Management Services
- Experience/knowledge of Azure Services (IaaS,PaaS,Serverless)
- Clear communicator with excellent writing, report writing and presentation skills; capable of constructing and delivering clear ideas and concepts concisely and accurately for diverse audiences.
- Evidence of excellent customer service skills and a commitment to improving services and performance for end users.
- Ability to analyse and interpret information, pre-empt and evaluate issues, and recommend and appropriate course of action to address the issues
- Problem solving skills and ability to respond to sudden unexpected demands
- Ability to work on own initiative and organise own workload without supervision working to tight and often changing timescales.
Desirable role criteria:
- Azure DevOps Pipeline experience via Git repositories
- Terraforming and Container experience
- Any development experience/certificates or other scripting languages like python
- A good understanding of the health and social care environment and roles and responsibilities within it
