Cyber Engineer

West Drayton, Middlesex
IAG

Job Description

As a Cyber Engineer, you will be working to manage and maintain our Identity and Access Management platforms, working with Product teams in one or more of our domains within the BA Tech Delivery Team to bring agile change to life.

Purpose of the role

Our organisation is seeking an experienced Cyber Delivery Engineer to join our team. The successful candidate will have several years of hands-on experience and will be responsible for implementing and maintaining our security posture.

The ideal candidate will have experience working with products/projects in any of the following security domains – IAM, Network and perimeter security, security policy, guardrails definition and implementation, pipeline security, security logging, API gateways, and compliance.

You will focus on identity services and platforms, using skills and experience of IDAM Platform-as-Service and Infrastructure-as-Code to deliver robust, secure and stable identity and access solutions for the organisation. You will design, create, maintain, audit and improve IDAM solutions and support platform development through continuous improvement and automation to meet the technology needs of our business.

Now is an exciting time to join the team to help shape and execute ambitious plans over coming years.

Accountabilities

Working in partnership with BA Digital and the business to:

• Lead and coordinate with stakeholders to define and implement security policies and procedures for our technical platforms.
• Oversee projects and change initiatives by leading the design, building, and implementation of IDAM solutions that meet the needs of the organisation using the latest best practices and industry standards.
• Strategically develop identity platforms, environments, and capabilities that enable and encourage continuous improvement and development, automation, and DevSecOps ways of working.
• Oversee the production of technical designs, operational and support documentation.
• Provide leadership and strategic direction for the support of identity platforms, to ensure relevant SLAs for stability, availability, and issue resolution are met.
• Manage and direct the resolution of incidents; oversee the building, testing, and implementation of fault fixes. Monitor the identity platforms to prevent problems from occurring.
• Ensure and verify platform compliance with internal and regulatory policy and standards.
• Lead relationships with 3rd party vendors and suppliers to maintain support status with all products and services used within the platform.
• Collaborate with and guide other teams to ensure compliance with security policies and procedures.
• Stay informed and inform the team about the latest cloud security trends and best practices.

This role may require some travel and working from multiple sites/locations within UK and internationally. You must be willing and able to travel to participate in meetings, workshops and other related activities

Qualifications

• Educated to degree level or equivalent experience

Desired qualifications

• Professional certifications e.g., CISM, CISSP, CISA,

Skills

• Leading the strategy for building and maintaining identity solutions using the Microsoft 365 suite of identity platforms and capabilities: Microsoft Entra ID, Microsoft Purview, Microsoft Intune, SCCM, Microsoft Defender, Teams, SharePoint, OneDrive
• Understanding of network protocols, firewalls, intrusion detection/prevention systems, VPNs, and other network security technologies.
• Implementing DevOps best practices and methodologies, infrastructure as code (GitHub Actions, PowerShell, Terraform, KQL, JSON, APIs)
• Infrastructure management (Active Directory, Group Policy, Certificate Services, DNS, Exchange, Federation Services, RedHat Identity Manager)
• Experience of DevOps, Scrum / agile, CI / CD, SRE environments and ways of working.
• Ability to communicate complex security concepts to technical and non 1 technical stakeholders. This includes writing clear and concise reports and documentation.
• Understanding of security policies, procedures, and compliance requirements. This includes knowledge of standards such as ISO 27001, NIST, and industry-specific regulations.
• Strong analytical and problem-solving skills to assess complex security issues and develop effective solutions.
• Collaborative, open working, resulting in recognition as a valued partner by colleagues, customers and senior stakeholders across the organisation.
• Strong leadership in analytical and problem-solving skills to assess complex security issues and develop effective solutions
• Fluent written and spoken English.

Experience

• Demonstrable experience of delivering cyber security in complex, multi 1 national organisations.
• Familiarity with a wide range of cybersecurity tools for vulnerability scanning, penetration testing, intrusion detection, and incident response.
• Proven expertise in the technical design, build, test and support of large and/or complex IDAM solutions.
• Demonstrable experience of deploying and maintaining Microsoft 365 identity platforms and capabilities
• Experience of developing in an agile, DevOps and/or SRE environment, including automation, infrastructure as code and continuous integration / continuous deployment.
• Experience of operating across multiple countries and cultures is desirable, but not essential.