Senior DevOps (Identity Platform Engineer)

We want to maximise the potential of everyone who chooses to work for us. We offer a great work life balance. You have the opportunity to work at any of our brand-new Regional Centres and to also work remotely. Contracts vary in length dependent upon the project with the possibility to extend.

Your time spent with us short or long term will be invaluable - your skills and expertise are needed to deliver the largest digital and transformation projects in Government. There really couldn’t be a better time to join HMRC for your new contract opportunity!

• Role is for 12 months
• MUST HAVE AN ACTIVE SC CLEARENCE
• Travel to the Telford Regional Centre will be required around once a month.

We’re looking for experienced Senior DevOps Engineers to join HMRC’s Enterprise Cloud Services (ECS) team, working within product teams to design, build, automate and operate identity platform services.

You will play a key role in delivering secure, scalable identity services, working closely with engineers, product owners, customer groups and vendors to enable secure integration of applications and services across HMRC using modern authentication and authorisation approaches.

As a Senior DevOps (Platform Engineer) within HMRC’s Enterprise Cloud Services (ECS), you will be responsible for the engineering, automation and operation of identity services, with a strong focus on Microsoft Entra ID and modern authentication patterns.

Working in a product-centric development environment, you will bring strong DevOps and engineering skills to build and operate identity services and integration patterns, enabling secure access across applications, APIs and platforms.

As an experienced DevOps/platform engineer, you will act as a technical specialist and mentor to developers, adopting an agile approach to delivery where new services or improvements are delivered collaboratively and incrementally to realise business value at the earliest opportunity.

Essential Criteria -

• Hands-on experience with Microsoft Entra ID, including: App Registrations, Enterprise Applications, Permissions and access models
• Strong understanding of modern authentication and authorisation protocols, including: OpenID Connect (OIDC), OAuth 2.0, SAML 2.0
• Ability to assess application requirements and determine the appropriate authentication and SSO solutions,
• Understanding of how applications authenticate and authorise using tokens, including: Delegated (user-based) access, Application (service-to-service) access.
• Understanding of Microsoft Graph API authentication and authorisation, including scopes and permission models.
• Knowledge of API security principles, including REST-based services and secure access patterns.
• Knowledge of digital certificates, including their use for: Encryption, Signing and validation of tokens.
• Experience working with automation and DevOps tooling, including:CI/CD pipelines, Infrastructure as Code (e.g. Terraform), Scripting (PowerShell, Python, Go or Bash).
• Experience producing clear technical documentation to support repeatable deployment and operation.
• Experience supporting and troubleshooting application and service integrations within an identity platform.