Back to jobs
Department for Work and Pensions (DWP)

Department for Work and Pensions (DWP)

Senior Infrastructure Engineer

Blackpool Hybrid 10+ yrs exp Government Administration 33,684 employees£58k – £73k / year
Microsoft Active DirectoryMicrosoft Entra IDMicrosoft Entra ConnectIdentity and Access ManagementIdentity Governance and Administration

Requirements

Candidates need substantial experience designing, implementing, supporting, and optimising enterprise-scale Active Directory and Entra ID services, including hybrid identity and IAM in complex organisations. They should have practical expertise in IGA, JML, modern authentication, PAM/PIM, and Zero Trust, and be able to provide technical leadership and influence stakeholders.

Job Description

This role may be located in one of the following locations; Blackpool or Manchester.

Please find further information on the Corporate hub locations here.

Job Summary

Please note this role requires you to pass Security Check clearance. For further information, please see 'Selection process details'.

Technology Services provide the foundations upon which digital services for Department for Work & Pensions (DWP) are developed and operate. Our purpose is to deliver secure, effective, and cost-efficient digital infrastructure services and to run live IT operations that support DWP business objectives. We do this by putting users and quality of service at the heart of what we do.

Our Team Is Made Up Of 1,500 Colleagues Working Collaboratively Across 10 Portfolio Led Teams In a Fast Moving Environment. Our Teams Deliver An End-to-end Suite Of Digital Products And Services That Support DWP Colleagues And Citizens In An Ever-evolving Technology Landscape. Our Work Is Focused Around The Following 6 Themes:

  • Delivering a digital workplace that improves the way we work.
  • Delivering high-quality and resilient IT services and support.
  • Building a world-class performance-focused user experience control centre.
  • Exploiting and enhancing hybrid cloud services.
  • Protecting and securing our services.
  • Developing our people, capability and skills.

If this sounds like you, apply today!

Job Description

The Identity Team delivers authentication, authorisation and identity governance services across DWP, supporting both human and non-human identities. Built on Microsoft Active Directory and Microsoft Entra ID, the team is responsible for critical identity capabilities including Identity Governance and Administration (IGA), Joiner-Mover-Leaver (JML) processes, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Single Sign-On (SSO), PKI, certificate and secrets management.

As a Senior Infrastructure Engineer, You Will:

  • Provide technical leadership for enterprise-scale identity services across on-premises and cloud platforms, including Microsoft Azure, Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI).
  • You will help deliver DWP's Identity strategy by strengthening identity governance, advancing Zero Trust principles, modernising access management capabilities, and improving the security and resilience of critical services.
  • Work closely with Security, Architecture, DevOps, SRE and supplier teams, you will design and implement secure identity solutions, enhance JML processes through automation, and support privileged access capabilities using technologies such as Microsoft Entra Privileged Identity Management (PIM) and CyberArk.

This is a unique opportunity to play a pivotal role in shaping the future of Identity and Access Management across one of the UK's largest and most complex IT environments. You'll help drive innovation, influence strategic direction and make a real impact on services used by millions.

Please note: This role will require participation in an on call rota, which would involve occasional work outside normal business hours. Further details will be provided to successful candidates during the recruitment process.

The Identity Team delivers authentication, authorisation and identity governance services across DWP, supporting both human and non-human identities. Built on Microsoft Active Directory and Microsoft Entra ID, the team is responsible for critical identity capabilities including Identity Governance and Administration (IGA), Joiner-Mover-Leaver (JML) processes, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Single Sign-On (SSO), PKI, certificate and secrets management.

As a Senior Infrastructure Engineer, You Will:

  • Provide technical leadership for enterprise-scale identity services across on-premises and cloud platforms, including Microsoft Azure, Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI).
  • You will help deliver DWP's Identity strategy by strengthening identity governance, advancing Zero Trust principles, modernising access management capabilities, and improving the security and resilience of critical services.
  • Work closely with Security, Architecture, DevOps, SRE and supplier teams, you will design and implement secure identity solutions, enhance JML processes through automation, and support privileged access capabilities using technologies such as Microsoft Entra Privileged Identity Management (PIM) and CyberArk.

This is a unique opportunity to play a pivotal role in shaping the future of Identity and Access Management across one of the UK's largest and most complex IT environments. You'll help drive innovation, influence strategic direction and make a real impact on services used by millions.

Please note: This role will require participation in an on call rota, which would involve occasional work outside normal business hours. Further details will be provided to successful candidates during the recruitment process.

Person specification

When Giving Details In Your Employment History And Personal Statement You Should Highlight Your Experience In Line With Essential Criteria Below:

  • Lead Criterion Demonstrable expertise in Microsoft Active Directory and Microsoft Entra ID, including the design, implementation, support and optimisation of enterprise-scale identity and access management services with strong experience of hybrid identity solutions using Microsoft Entra Connect
  • Significant experience delivering Identity and Access Management (IAM) services within a large, complex enterprise environment, working effectively across internal teams, multiple suppliers and third-party service providers.
  • Strong experience of Identity Governance and Administration (IGA) and Joiner-Mover-Leaver (JML) lifecycle management, including access provisioning, role management, automation, auditing and compliance controls.
  • Practical experience designing and implementing modern authentication and authorisation solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, federation, and application integration with Microsoft Entra ID.
  • Proven experience implementing and operating Privileged Access Management (PAM) and Privileged Identity Management (PIM) solutions, including privileged account governance, Role-Based Access Control (RBAC), Just-in-Time (JIT) access, and technologies such as Microsoft Entra PIM or CyberArk.
  • Experience applying Zero Trust principles to identity architectures, including least-privilege access, identity protection, privileged access controls and threat mitigation, with the ability to provide technical leadership and influence stakeholders at all levels.

If you would like to learn more about the role, please contact Richard.Hanley@dwp.gov.uk.

Alongside your salary of £57,946, Department for Work and Pensions contributes £16,786 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

We also have a broad benefits package built around your work-life balance which includes:

  • Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
  • Generous annual leave – at least 25 days on entry, increasing up to 30 days over time (pro–rata for part time employees), plus 9 days public and privilege leave.
  • Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
  • Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
  • Family friendly policies including enhanced maternity and shared parental leave pay after 1 year’s continuous service.
  • Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
  • An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women’s Network, National Race Network, National Disability Network (THRIVE) and many more.

Hybrid Working

This role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work.

If a hybrid working arrangement is suitable for the role and for you, you will normally be required to spend a minimum of 60% of your contracted working hours from your DWP office.

If you have a disability, caring responsibilities, or other circumstances that may affect your ability to meet the minimum office attendance requirement, please discuss this with us using the contact details in this advert.

Salary Information

Pay for this role is from £57,946 to £73,205.

The maximum salary for the grade is £68,205 however a Digital Allowance of up to £5,000 per annum is available for exceptional candidates. Digital Allowance is non-salary, and non-pensionable, and is classed as a temporary allowance. It is reviewed annually where it could be retained, amended, or removed.

Our offer to successful candidates will be based on an assessment of your skills and experience as demonstrated at interview.

Existing Civil Servants who secure a new role on lateral transfer will maintain their current substantive salary.

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

Stage 1: Application

Your Application Will Consist Of Three Parts:

  • A Personal Details application form.
  • Employment history - this should contain your work experience and any skills, qualifications and accomplishments relevant to the jobs you have completed based on the essential criteria.
  • Personal statement - up to 1250 words. This statement should be used to provide examples of how you meet the essential criteria listed in the Person specification.

Ensure that all examples provided in your statement are taken directly from your own experience and that you describe the examples in your own words. If you choose to use gen-AI to support your statement, you must follow the guidelines outlined in the Artificial intelligence and recruitment guide.

The sift panel will use the information in your employment history and personal statement to assess your experience, skills and knowledge against the essential criteria.

An initial sift will be conducted using the lead criterion stated in the Person Specification. Candidates who pass the initial sift will progress to a full sift

You will be provided with one combined overall assessment score for both your CV and Personal Statement.

For Hints and Tips on completing your application visit Applying for jobs at DWP Digital.

Important Information

  • You will be asked to complete your employment history. Any information that you would customarily share on a CV should therefore be entered onto the application form.
  • Personal details that could be used to identify you including your name, contact details and address must be removed for your application to be considered.
  • If your employment history/personal statement contains any personal details your application will be withdrawn.

Stage 2: Face to Face Interview

If you’re successful at sift stage, you will be invited to a face to face interview in your chosen Hub location. During the interview, you will be assessed against the experiences listed in the essential criteria under Person Specification.

Candidates will also be required to complete a 30-minute practical assessment to demonstrate their expertise in Microsoft Active Directory and Microsoft Entra ID during the face to face interview.

Interviews will take place from early November 2026. Interview dates to be confirmed.

Other Information:

If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.

All successful candidates and those placed on reserve will be posted in merit list order by location.

For these vacancies, we strongly recommend that applicants consult with an immigration specialist or qualified advisor to assess their eligibility for Visa Sponsorship before deciding to apply. Please note that while we consider sponsorship requests in accordance with current DWP guidance and Home Office policy, sponsorship cannot be guaranteed.

Security Clearance Requirement

You must meet the security requirements before you can be appointed. The level of security needed is security check.

You must have resided continuously in the UK for at least 3 of the last 5 years, 2 of which must have been the immediately preceding years from the point of applying for this job.

For further information on National Security Vetting please visit the Demystifying Vetting website.

Further Information

At the Department for Work and Pensions (DWP) we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce.

Find out more about working for DWP on the DWP Careers Hub.

Reserve List

A reserve list may be held for a period of 6 months from which further appointments can be made.

If you are placed on a reserve list but we cannot immediately offer you a post, please note:

  • If you are later offered the role you applied for, in a location you have expressed a preference for, and you decline the offer or are unable to take up the post within a reasonable timeframe you will be withdrawn from the campaign and removed from the reserve list, other than in exceptional circumstances (e.g. a contractual Part Time Working Pattern cannot be accommodated in the initial role offered or in cases of serious ill health).
  • If DWP makes an offer of an alternative role or location to that which you originally applied for, and you decline that offer, you will be able to remain on the reserve list.

Disability Confident Scheme

If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.

Reasonable Adjustments

We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia.

If you need a change to be made so that you can make your application, you should contact the Government Recruitment Service via DWPRecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Complete the “Reasonable Adjustments” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

Integrity, plagiarism and Civil Service Principles

The Civil Service values honesty and integrity and expects all candidates to abide by these principles.

Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words.

Examples Of Plagiarism Can Include:

  • Presenting the work, ideas and experience of others as your own
  • Copying content or answers from an online or published source that is not your own

Disclosure and Barring Service and Internal Fraud Database Checks

To process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service or Disclosure Scotland on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

If successful and transferring from another Government Department, a criminal record check will be carried out.

Important

New entrants are expected to join on the minimum of the pay band.

Before applying for this vacancy, current employees of DWP should check whether a successful application would result in changes to their terms & conditions of employment, e.g. mobility, pay, allowances. If you are a current employee and are successful you must be able to be released from your current post within four weeks.

Those on protected TUPE/ COSoP terms and conditions applying on promotion or voluntary permanent level move will adopt DWP’s Terms and Conditions and this may have a different impact on pay and allowances. Please review this prior to acceptance of a role.

Civil Servants that would transfer into DWP from other government organisations, following successful application, will assume DWP's terms & conditions of employment current on the day they are posted, unless DWP has stated otherwise in writing. Accepting a post will be taken to mean acceptance of revised terms & conditions.

Civil Servants applying on promotion will usually be appointed to the salary minimum or within 10% of existing salary.

Any move to DWP from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may, however, be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at the Childcare Choices Website.

For further information on reasonable adjustments, terms and conditions and how we recruit visit the How we recruit page

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Successful candidates must undergo a basic (or equivalent) criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This Job Is Broadly Open To The Following Groups:

  • UK nationals
  • nationals of the Republic of Ireland
  • nationals of Commonwealth countries who have the right to work in the UK
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
  • individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
  • Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job Contact :

  • Name : Richard Hanley
  • Email : Richard.Hanley@dwp.gov.uk

Recruitment team

  • Email : digitalrecruitment.grs@cabinetoffice.gov.uk

Further information

Appointment to the Civil Service is governed by the Civil Service Commission’s Recruitment Principles. If you feel your application has not been treated in accordance with these principles and you wish to make a complaint, you should in the first instance contact DWP by email: HR.BUSINESSASSURANCE@DWP.GOV.UK.

If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission. Click here to visit the Civil Service Commission.

Skills

Microsoft Active DirectoryMicrosoft Entra IDMicrosoft Entra ConnectIdentity and Access ManagementIdentity Governance and AdministrationJoiner-Mover-Leaver Lifecycle ManagementPrivileged Access ManagementMicrosoft Entra Privileged Identity ManagementCyberArkSingle Sign-OnMulti-Factor AuthenticationConditional AccessFederationRole-Based Access ControlJust-in-Time AccessZero Trust

About Department for Work and Pensions (DWP)

The Department for Work and Pensions (DWP) is the UK’s largest government department and is responsible for welfare, pensions and child maintenance policy. It administers the State Pension and a range of working age, disability and ill health benefits, serving around 20 million customers. DWP is responsible for • understanding and dealing with the causes of poverty rather than its symptoms • encouraging people to work and making work pay • encouraging disabled people and those with ill health to work and be independent • providing a decent income for people of pension age and promoting saving for retirement • providing value for money and reducing levels of fraud and error • reducing work-related death and serious injury in workplaces through the Health and Safety Executive DWP is a fast paced organisation which puts leadership at the centre of its transformation journey. The majority of DWP colleagues are part of the Operational Delivery Profession (ODP) – providing customer service to DWP’s 20 million customers across the UK. ODP is a thriving, inclusive professional community that supports colleagues and encourages them to learn, develop, grow and progress in their career to reach their full potential.