SC Cleared PKI Infrastructure Engineer (PKI) Full Time

Alexander Mann Solutions – Public Sector Resourcing

Senior Infrastructure Engineer – (Inside IR35)

Contract Term: 6 Months

Contracting Authority: DWP

Location: Hybrid – 2/3 days in office. This can be either Manchester, Newcastle upon Tyne, Blackpool

The Department for Work and Pensions (DWP) is responsible for welfare, pensions, and child maintenance policy. As the UK’s biggest public service department, it administers the State Pension and a range of working age, disability and ill health benefits to around 20 million claimants and customers. As such, we operate on a scale that is almost unmatched anywhere in Europe and most people in Britain come into contact with us at some point in their lives.

Working with DWP, you will be helping us to drive our priorities to:

Run an effective welfare system that enables people to achieve financial independence by providing assistance and guidance into employment

• Increase saving for, and security in later life
• Create a fair and affordable welfare system which improves the life chances of children
• Deliver outstanding services to our customers and claimants
• Deliver efficiently: transform the way we deliver our services to reduce costs and increase productivity

The proficient Identity team oversees all aspects of internal authentication within the DWP infrastructure. The focus revolves around Active Directory/Entra ID, supplemented by various supporting infrastructure components like DNS, Certificate Services (PKI), Modern Authentication (MFA, WHfB), Entra ID Connect, and Single Sign-On technologies. Additionally, the team provides support for a custom-built Identity Management platform that integrates seamlessly with ServiceNow, along with enterprise security systems such as CyberArk PAM and CyberArk Conjur Secrets Management.

As the service proprietors, we bear responsibility for the everyday operational support and the design elements associated with changes/projects. The absence of these services would impede the delivery of essential DWP business functions. We hold ownership of the Identity & Digital Encryption roadmap and are actively pursuing a multi-year plan to enhance the service. This involves ongoing, long-term initiatives, including increased utilisation of cloud services such as Azure/AWS.

Our objective is to deliver a contemporary, dependable, and versatile service that facilitates uncomplicated yet secure access to DWP devices, data and systems, adhering to industry best practices.

Furthermore, in tight collaboration with DevOps/SREs, the Identity team oversees all facets of Identity and Digital Certificates, including access management pertaining to AWS and Microsoft Azure Cloud technologies. This involves utilizing features such as AWS Private CA, Key Management Services, Azure IAM/PIM, MFA, CA Policies, and Enterprise Apps.

Knowledge and experience of the following would be beneficial when starting the role but isn’t essential:

• Hardware Security Modules (HSM) management and configuration.
• Customer Cloud Key Management Services (CCKMS).

Essential:

• SC Clearance
• In depth knowledge of Microsoft Public Key Infrastructure (PKI) including configuration, administration, and certificate lifecycle management skills.
• In depth knowledge and hands-on experience of Active Directory / Entra ID (Azure AD).
• Practical experience in operating within public cloud environments such as AWS and/or Microsoft Azure.
• Experience of working with any Privileged Access / Secrets Management systems including but not limited to Entra Privileged Identity Management (PIM), CyberArk PAM, CyberArk Conjur, Azure Key Vault.
• Background in working within large enterprise settings and multi-supplier environments.

If this role sounds like something that you would be interested in, please click the link to apply or get in touch with Rebecca Nolan

Disability confident

As a member of the disability confident scheme, DWP guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

If you qualify for the above, please notify us on .

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

In applying for this role, you acknowledge the following, this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different.

Please be aware that this role can only be worked within the UK and not Overseas.