Senior IAM Engineer (AWS) at UK Health Security Agency, Remote, 6 Months, £Contract Rate

Please note : An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. (Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.) 

The UK Health Security Agency (UKHSA) has been set up to provide health security for the nation by protecting from infectious disease and external hazards. It will need to take action like no other organisation previously in order to mitigate threats to health before they materialise. UKHSA will be a trusted source of advice to government and to the public.

We are seeking a skilled Engineer to join our Identity Access Management Team. This role will be the lead subject matter expert for Identity services related to AWS within a varied team of other Identity specialists. The role involves close collaboration with cross-functional teams across UKHSA as well as with third-party vendors.

You will play a vital role in keeping public health data safe by ensuring secure access to sensitive systems. Your work will help guarantee that the right people have the right access at the right time, supporting both UKHSA and colleagues across the organisation.

As a Senior IAM Engineer (AWS) your main responsibilities will be to:

• Manage end-to-end delivery of Identity services within AWS Cloud Platforms, driving operational efficiency and adhering to DevOps principles.
• Day-to-day identity operations, such as incident resolution and service requests.
• Contribute to the development and delivery of the identity strategy and roadmap, working with internal and external stakeholders to improve access management across multiple systems.
• Leverage native logging and diagnostic tooling to assist with issues related to AWS Identity Services and associated infrastructure.
• Provide guidance and support to team members including operational support teams.
• Provide the main point of contact for problems, issues, support and guidance relating to AWS Identity Services.
• Author and maintain documentation for operational procedures such as KB articles to share with peers and wider support personnel.
• Work effectively with teams across infrastructure, security, identity and application domains to enable secure and seamless integration.
• Sharing skills and knowledge and delivering training on AWS to members of the team and Technology Directorate.

Essential:

• Strong hands-on experience with AWS Identity services, in particular Identity Centre and IAM components. This includes authentication and authorization, role and privilege management, SSO, Cognito, Certificate Services and identity lifecycle.
• Experienced with the integration and management of Microsoft Entra ID and Active Directory with AWS to allow seamless authentication via SSO for modern devices.
• Competent with the use of infrastructure as code (IAC) utilising Terraform within a DevOps environment.
• Solid understanding of networking concepts, protocols, and security best practices.
• Proven ability to diagnose and resolve complex technical issues.
• Effective communication skills, both written and verbal.
• Strong analytical and problem-solving capabilities.
• Strong knowledge of cloud-based security models and services.

Desirable:

• Knowledge and Experience with Microsoft Identity Ecosphere and associated components, including the use of PowerShell scripting.
• Experience of integrating with Gov.UK One Login or similar CIAM solutions.
• Experience in building and maintaining access management systems with varied technologies such as FreeIPA, OpenAM, or other OpenID connect, Oauth or SAML services providers.
• Familiarity with ITIL processes for incident, change, and problem management.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability confident 

As a member of the disability confident scheme, UKHSA guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

Armed Forces Covenant / commitment

The UK Health Security Agency guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group.

In applying for this role, you acknowledge the following this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different.