Platform and Services Engineer - IAM (we have office locations in Cambridge, Leeds and London)

IAM Platform and Services Engineer - Business Systems Team

Are you an Engineer who is passionate about Identity and Access Management, automation, AWS cloud technology, and solving complex engineering challenges?

At Genomics England, we're hiring an IAM Platform and Services Engineer.

This role sits in our high impact Business Systems Team within our Scalable Tech service, working alongside systems administration, cloud platform and IAM engineering specialists. Together, the service provides underpinning infrastructure and guard rails to stream aligned teams across our healthcare and research services.

The IAM Platform and Services Engineer collaborates across Business Systems, Security, Information Governance, Architecture, Software, QA and Platform engineering specialists to design, build and maintain enterprise-wide solutions for Identity and Access Management (IAM) / Authentication, Authorisation and Accountability (AAA).

As an Engineer in the team, you will also be expected to contribute to the Engineering Chapter through enablement, coaching and strategy, working closely with your team and the wider engineering community across the business to help Genomics England build a future-ready cloud platform that will stand the test of time.

This is an engineering role in a truly mission-critical environment, ensuring our platforms are scalable, secure, and efficient. Your knowledge and expertise will really shape the future of our technology; we believe strongly in empowering engineers, fostering an inclusive culture, and giving you the autonomy to make a real impact.

Everyday responsibilities include:

• Design, implement, operate and continuously improve identity and access management policies, processes and controls to ensure access to IT and information resources is managed and controlled effectively and securely, operating within legal and regulatory constraints and meeting business requirements.

• Identity and Access Management (IAM)

• Authentication and Authorisation

• Identity Lifecycle Management

• Integration and Interoperability of solutions within the hybrid cloud and on prem Infrastructure, demonstrating expertise and engineering best practice in respect of infrastructure as code, automation, orchestration, CI/CD, configuration management and a collaborative DevOps culture

• Security, Information Governance and Compliance

• Provide both proactive and reactive operational support, minimising need where possible and simplifying delivery through effective logging, monitoring and knowledge transfer

• Collaborate with a supportive DevOps team to drive automation, efficiency, and continuous improvement.

• Provide support to fellow Platform Engineers with day-to-day changes to our codebase.

• Develop and maintain Engineering Golden Path templates and contribute to engineering enablement across the wider organisation.

• Implement Infrastructure as Code (IaC) to automate deployments and reduce manual effort.

• Influence engineering decisions in a collaborative and inclusive environment that values diverse perspectives.

Skills and experience for success:

• Solid expertise in IAM with demonstrable understanding of one or more industry standard IAM protocols, such as Kerberos, OAuth, FIDO, SCIM, LDAP, SAML, OpenID Connect (OIDC)

• Experience building and maintaining solutions for authentication, authorisation and accountability (AAA).

• Knowledge of, and hands-on experience with, industry standard IAM tooling solutions, such as Okta, Auth0, Active Directory and Azure AD (MS Entra ID)

• Some experience administering user access to networks and systems is desirable, including managing user access credentials, maintaining access in line with authorised service requests, and supporting joiner, mover and leaver processes.

• Some awareness of the range of available AWS Security, Identity and Compliance services is desirable

• Exposure to and passion for DevOps best practice, automation, CI/CD and Infrastructure as Code is desirable

• Willingness to learn new skills and technology is a must

If you are an experienced and passionate IAM Platform and Services Engineer, we'd love to hear from you. Join Genomics England and help shape the platforms that are powering the future of genomic healthcare!

• Qualifications are not mandatory. However, Okta certifications are welcomed and would be considered an advantage.

• Computer Science or Relevant Engineering Degree as a recent Graduate would also be beneficial (though not a requirement)

Salary From: £73,500
Closing Date: Sunday 4th October @ 23:00 (UK time)

Being an integral part of such a meaningful mission is extremely rewarding in itself, but in order to support our people, we’re continually improving our benefits package. We pride ourselves on investing in our people and supporting them to achieve their career goals, as well as offering a benefits package including:

• Generous Leave: 30 days’ holiday, plus bank holidays, plus additional leave for long service, and also the option to apply for up to 30 days of remote working abroad annually (approval required).
• Family-Friendly: Blended working arrangements, flexible working, enhanced maternity, paternity and shared parental leave benefits.
• Pension & Financial: Defined contribution pension (Genomics England double-matches up to 10%, however you can contribute more if you wish), Life Assurance (3x salary), and a Give As You Earn scheme.
• Learning & Development: Individual learning budgets, support for training and certifications, and reimbursement for one annual professional subscription (approval required).
• Recognition & Rewards: Employee recognition programme and referral scheme.
• Health & Wellbeing: Subsidised gym membership, a free Headspace account, and access to an Employee Assistance Programme, eye tests, flu jabs.

Equal opportunities and our commitment to a diverse and inclusive workplace

Genomics England is actively committed to providing and supporting an inclusive environment that promotes equity, diversity and inclusion best practice both within our community and in any other area where we have influence. We are proud of our diverse community where everyone can come to work and feel welcomed and treated with respect regardless of any disability, ethnicity, gender, gender identity, religion, sexual orientation, or social background.

Genomics England’s policies of non-discrimination and equity and will be applied fairly to all people, regardless of age, disability, gender identity or reassignment, marital or civil partnership status, being pregnant or recently becoming a parent, race, religion or beliefs, sex or sexual orientation, length of service, whether full or part-time or employed under a permanent or a fixed-term contract or any other relevant factor.

Genomics England does not tolerate any form of discrimination, harassment, victimisation or bullying at work. Such behaviour undermines our mission and core values and diminishes the dignity, respect and integrity of all parties. Our People policies outline our commitment to inclusivity.

We aim to remove barriers in our recruitment processes and to be flexible with our interview processes. Should you require any adjustments that may help you to fully participate in the recruitment process, we encourage you to discuss this with us.

Culture

We have four key behaviours that represent what we would like Genomics England to feel like and the culture we want to encourage, in order for us to achieve our mission. These behaviours help us all work well together, deliver on our outcomes, celebrate our successes and share feedback with each other. You can read about these and other aspects of our culture here Culture | Genomics England

Blended working model

Genomics England operates a blended working model as we know our people appreciate the flexibility that hybrid working can bring. We expect most people to come into the office a minimum of 2 times each month. However, this will vary according to role and will be agreed with your team leader. There is no expectation that people will return to the office full time unless they want to, however, some of our roles require full time on site attendance e.g., lab teams, reception team.

Our teams and squads have, and will continue to reflect on what works best for them to work together successfully and have the freedom to design working patterns to suit, beyond the minimum. Our office locations are: Canary Wharf, Cambridge and Leeds.

Onboarding background checks

As part of our recruitment process, all successful candidates are subject to a Standard Disclosure and Barring Service (DBS) check. We therefore require applicants to disclose any previous offences at point of application, as some unspent convictions may mean we are unable to proceed with your application due to the nature of our work in healthcare.