Length of employment: Job Summary: Technology Services provide the foundations upon which digital services for DWP are developed and operate. Our purpose is to deliver secure, effective, and cost-efficient digital infrastructure services and to run live IT operations that support DWP business objectives. We do this by putting users and quality of service at the heart of what we do. Our team is made up of 1,500 colleagues working collaboratively across 10 portfolio-led teams in a fast-moving environment. Our teams deliver an end-to-end suite of digital products and services that support DWP colleagues and citizens in an ever-evolving technology landscape. Our work is focused around the following 6 themes: Delivering a digital workplace that improves the way we work. Delivering high-quality and resilient IT services and support. Building a world-class performance-focused user experience control centre. Exploiting and enhancing hybrid cloud services. Protecting and securing our services. Developing our people, capability and skills. We are looking for an experienced Senior Infrastructure Engineer who is a skilled Practitioner and role model in Identity solutions. Please note this role requires you to pass Security Check clearance. For further information, please see 'Selection process details'. Job Description: The Identity team is responsible for all elements of internal authentication within the DWP estate. This is primarily based around Active Directory/Entra ID but includes several other supporting infrastructure components, including DNS, Certificate Services, Encryption Key management, Modern Authentication (MFA, WHfB), Entra ID Connect and Single Sign On technologies. We also support a purpose-built Identity Management platform which integrates with ServiceNow, as well as operating privileged management systems such as CyberArk. We are the owners of the service, accountable for all day-to-day operational support and all change/project related design elements. Without these services, core DWP business could not be delivered. We own the Identity roadmap and have a multi-year plan to deliver an enhanced service, with several long-term pieces of work ongoing which include greater adoption of cloud services such as Azure, AWS and Oracle Cloud Infrastructure (OCI). We are looking for a Senior Infrastructure Engineer to work within our team which provides 365-day a year, 24/7 Identity services for DWPs user base. Our aim is to provide a modern, reliable and flexible service that allows simple, secure access to DWP devices, Data and Systems using industry best practice for the following technologies: Active Directory Domain Services, Entra ID, Entra ID Connect, Azure SSO, Azure IAM and CyberArk PAM. In addition, working closely with DevOps/SREs, the Identity team manage all aspects of Identity and Access management relating to Microsoft Azure Cloud leveraging features such as PIM, MFA, CA Policies, User/Group/App Registration management and Defender for Identity. We also have a broad benefits package built around your work-life balance which includes: Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours. Generous annual leave - at least 25 days on entry, increasing up to 30 days over time (pro-rata for part time employees), plus 9 days public and privilege leave. Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme. Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly). Family friendly policies including enhanced maternity and shared parental leave pay after 1 year's continuous service. Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes. An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women's Network, National Race Network, National Disability Network (THRIVE) and many more. This job role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work. The number of days that anyone will be able to work at home will be determined primarily by business need but personal circumstances and other relevant circumstances will also be taken into account. If you are successful, any opportunities for hybrid working, including whether a hybrid working arrangement is suitable for you, will be discussed with you prior to you taking up your post. Salary Information Pay for this role is from £55,557 to £68,517. The maximum salary for the grade is £66,058, however a Digital Allowance of up to £2,459 per annum is available for exceptional candidates. Digital Allowance is non-salary, and non-pensionable, and is classed as a temporary allowance. It is reviewed annually where it could be retained, amended, or removed. Our offer to successful candidates will be based on an assessment of your skills and experience as demonstrated at interview. Existing Civil Servants who secure a new role on lateral transfer should maintain their current salary. Existing Civil Servants who gain promotion may move to the bottom of the grade pay scale or 10% increase in salary whichever would be the greater. When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria below: Strong working knowledge and practical experience in 3rd / 4th line knowledge of Active Directory / Entra ID. Strong working knowledge and practical experience in 3rd / 4th line knowledge of Windows Server Security, Monitoring and Vulnerability Management. Proven ability and experience of onboarding applications to Entra ID. Strong working knowledge and practical experience of SSO (Azure) & MFA. Significant demonstrable experience of implementing and working with Privileged Access Management systems and RBAC eg. Azure Privileged Identity (PIM) Management and CyberArk. Extensive experience and proven track record of working in a large enterprise and multi-supplier environment. If you would like to learn more about the role, please contact richard.hanley@dwp.gov.uk. Stage 1: Application Your application will consist of three parts: 1. A Personal Details application form. 2. Employment history - this should contain your work experience and any skills, qualifications and accomplishments relevant to the jobs you have completed based on the essential criteria. 3. Personal statement - up to 1250 words. This statement should be used to provide examples of how you meet the essential criteria listed in the Person specification. The sift panel will use the information in your employment history and personal statement to assess your experience, skills and knowledge against the essential criteria. You will be provided with one combined overall assessment score for both your CV and Personal Statement. Applications will be sifted at regular intervals from the date the posts are advertised. Please apply as soon as you can, do not wait until the end of the campaign. Important Information You will be asked to complete your employment history any information that you would customarily share on a CV should therefore be entered onto the application form. Personal details that could be used to identify you including your name, contact details and address must be removed for your application to be considered. If your employment history/personal statement contains any personal details your application will be withdrawn. We recognise that AI may be helpful when applying for this role, but it is important to use it in the right way. Read the DWP AI Candidate Guide to understand how you can make the best use of GenAI while ensuring your application remains authentic and effective. Stage 2: Interview If you're successful at sift stage you will be invited to a video interview via Microsoft Teams. There, you will be assessed against the experiences listed in the essential criteria. You will be asked to do a 10-minutes presentation on a specific topic. The use of visual aids such as PowerPoint is optional. There will be a further 5 minutes for questions. Further details will be provided to candidates invited to interview. Interviews will take place from mid to late June 2025. Interview dates to be confirmed. Other information: If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards. All successful candidates and those placed on reserve will be posted in merit list order by location. Security Clearance Requirement You must meet the security requirements before you can be appointed. The level of security needed is security check. For meaningful checks to be carried out, you will need to have lived in the UK for a sufficient period of time, to enable appropriate checks to be carried out and produce a result which provides the required level of assurance. Whilst a lack of UK residency in itself is not necessarily a bar to a security clearance, and expectation of UK residency may range from 3 to 5 years. Failure to meet the residency requirements needed for the role may result in the withdrawal of provisional jobs offers. For further information on National Security Vetting please visit the Demystifying Vetting website. Further Information: Find out more about Working for DWP. For Hints and Tips on completing your application visit Applying for jobs at DWP Digital. A reserve list may be held for a period of 6months from which further appointments can be made. All successful candidates and those placed on reserve will be posted in merit list order by location. The Civil Service values honesty and integrity and expects all candidates to abide by these principles. Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words. Applications will be screened and if evidence of plagiarism or copying examples/answers from other sources is found, your application will be withdrawn. Internal DWP candidates may also face disciplinary action. Reasonable Adjustment At DWP we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce. We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia. If you need a change to be made so that you can make your application, you should: Contact Government Recruitment Service via as soon as possible before the closing date to discuss your needs. Complete the "Reasonable Adjustments" section in the "Additional requirements" page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you're deaf, a Language Service Professional. For further information on reasonable adjustments, terms and conditions and how we recruit visit the How We Recruit page. Feedback