Interviews: week commencing 25/11/24 (subject to change) 

Grade: SEO

(MoJ candidates who are on a specialist grade, will be able to retain this grade on lateral transfer) 

Salary: National: £41,463 - £51,675 (which may include an allowance of up to £10,212)

London: £47,657 - £56,050 (which may include an allowance of up to £8393) 

Working pattern: Full-time, part-time, flexible working, job share

Contract Type: Permanent 

Vacancy number: 91944 

*We offer a hybrid working model, allowing for a balance between remote work and time spent in your local office. Office locations can be found ON THIS MAP

The Role

We’re recruiting for Identity Access & Management (IDAM) Infrastructure Engineers to be part of our warm and collaborative End User Compute Services (EUCS) IdAM team.  The EUCS Team designs delivers and supports the core infrastructure and systems that enable End User Compute Services and line of business applications for over 100,000 Ministry of Justice users across over 800 locations. 

These are exciting times at Justice Digital. We have a clear vision - to develop a digitally enabled justice system that works simply for its users - and we’re looking for enthusiastic, talented people to help us achieve it. 

We’re making things better by building adaptable, effective services and creating simple systems for staff and citizens. It can be challenging but it’s also important and rewarding.

This role aligns against Infrastructure Engineer from the Government Digital and Data Framework 

In addition to doing interesting work, we’re creating an environment that’s great to work in. We provide the opportunity to work with the latest technologies and offer brilliant training opportunities alongside support from expert colleagues. On top of that, you’ll find flexible working, an inclusive culture, and a place where your opinion is valued. 

To help picture your life at MoJ Justice Digital please take a look at our blog and our Digital and Technology strategy 2025 

Key Responsibilities:

We want to hear from people who value making a difference and building user-focused services and enjoy working in a multi-disciplinary, highly collaborative team, that uses modern tools and working practices. 

As an IDAM Engineer in EUCs, you will:Collaborate with cross-functional teams to drive IdAM initiatives across the organisation.Implement technologies in line with IdAM architectures that meet the current and future business needs.Supporting the evaluation of emerging technologies and recommend their adoption based on business value and security considerations.Develop and update IdAM policies, standards, and procedures.Assess IdAM-related risks and develop technical strategies to mitigate them.Collaborate with the risk management team to integrate IdAM into the organisation's overall risk management framework.Lead incident response efforts related to IdAM incidents.Conduct post-incident reviews and implement improvements to prevent future incidents.Ensure IdAM solutions comply with industry regulations and standards.Collaborate with auditors to address IDAM-related audit findings and implement corrective actions.Manage relationships with IdAM solution vendors.Stay informed about industry trends and assess the potential impact on the organisation.Implement automation solutions to streamline IdAM processes and improve efficiency.Optimise IdAM systems for performance, scalability, and resource utilisation.Collaborate with the IT security team to align IDAM practices with broader security initiatives.

If this feels like an exciting challenge, something you are enthusiastic about, and want to join our team please read on and apply! 

The Infrastructure Engineer will work collaboratively with: 

Lead and Senior EngineersTechnical Architecture and Service Operations teams3rd party Service Managers, Project and Technical leadsSenior Operations Managers within the EUC teamKey MOJ stakeholders 

Please note, you will be required to take part in an on-call rota, sharing the responsibility of providing out-of-hours engineering cover for major incidents for which an additional allowance is payable.

Benefits

37 hours per week and flexible working options including working from home, working part-time, job sharing, or working compressed hours. A £1k per person learning budget is in place to support all our people, with access to best-in-class conferences and seminars, accreditation with professional bodies, fully funded vocational programmes and e-learning platforms Staff have 10% time to dedicate to develop & grow Generous civil service pension based on a defined benefit scheme, with employer contributions of 28.97% from April 1st 2024 (Contribution Rates) 25 days leave (plus bank holidays) and 1 privilege day usually taken around the Kings’ birthday. 5 additional days of leave once you have reached 5 years of service. Compassionate maternity, adoption, and shared parental leave policies, with up to 26 weeks leave at full pay, 13 weeks with partial pay, and 13 weeks further leave. And maternity support/paternity leave at full pay for 2 weeks, too! Wellbeing support including access to the Calm app. Bike loans up to £2500 and secure bike parking (subject to availability and location) Season ticket loans, childcare vouchers and eye-care vouchers. 5 days volunteering paid leave. Free membership to BCS, the Chartered Institute for IT. Some offices may have a subsidised onsite Gym. 

Person Specification

Essential 

Experience in automation or CI/CD using one of the following tools Azure DevOps, Azure Logic App or Azure Automation, Webhook, ServiceNow and a good understanding of PowerShell REST API’s and JSON.Experience in working with technical solutions for IdAM security, including authentication, single-sign-on (enterprise and web/ cloud), and access and entitlement management (including privileged access/ identity management)Experience managing Identity & Access Management processes (user provisioning, account creation and management).Good debugging, problem-solving and analytical skillsGood understanding of security principles and technologies in the identity and access management domain: RBAC, modern MFA, SSO, Windows Hello for Business, Conditional Access, and Self-service password reset (SSPR).Experience managing IdAM processes (user provisioning, account creation and management) and PKI.Have experience working in an Agile, fast-paced working environment using Agile tools and techniques (Jira, Confluence, Miro)     Willingness to be assessed against the requirements for SC Clearance. 

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service D&I Strategy.

How to Apply 

Candidates must submit a CV and Personal statement (approximately 850 words), in four separate statements please give examples of your experience in the following criteria 

Experience in automation or CI/CD using one of the following tools Azure DevOps, Azure Logic App or Azure Automation, Webhook, ServiceNow Good understanding of PowerShell REST API’s and JSON.Experience in working with technical solutions for IdAM security, including authentication, single-sign-on (enterprise and web/ cloud), and access and entitlement management (including privileged access/ identity management)Experience in managing Identity & Access Management processes (user provisioning, account creation and management).Good debugging, problem-solving and analytical skills 

In Justice Digital, we recruit using a combination of the Government Digital and Data Profession Capability and Success Profiles Frameworks. We will assess your Experience, Technical Skills and the following Behaviours during the assessment process: 

Working together Seeing the big picture Changing and improving Managing a quality service 

A diverse panel will review your application against the Person Specification above. 

Successful candidates who meet the required standard will then be invited to a 1-hour panel interview held via video conference. 

Should we receive a high volume of applications, a pre-sift based on your Experience in managing Identity & Access Management processes (user provisioning, account creation and management) will be conducted before the sift. 

Should you be unsuccessful in the role that you have applied for but demonstrate the capability for a role at a lower level, we reserve the right to discuss this opportunity with you and offer you the position without needing a further application. 

A reserve list may be held for up to 12 months, from which further appointments may be made.

Terms & Conditions

Please review our Terms & Conditions which set out how we recruit and provide further information related to the role and salary arrangements. 

If you have any questions, please feel free to contact recruitment@digital.justice.gov.uk