Platform Operations Engineer

Key Responsibilities:

Identity and Access Management

• Design, implement, configure and maintain IAM solutions across the organization.
• Support the delivery, operation and continuous improvement of enterprise identity solutions used by multiple organizations and stakeholders.
• Configure and manage identity brokering and federation products, with a focus on the Microsoft ecosystem, including Active Directory, AD FS, Public Key Infrastructure and Microsoft Entra ID.
• Implement and manage authentication and authorization protocols, including Kerberos, SAML, OAuth and OpenID Connect.
• Use Microsoft Graph API to support identity administration, integration and automation.
• Ensure the security, resilience, governance and compliance of identity platforms.

Platform Automation and Operations

• Develop and maintain scripts, tools and automation to reduce operational toil and eliminate repetitive manual tasks.
• Build and maintain platform and deployment automation using appropriate scripting, configuration management and CI/CD practices.
• Apply DevSecOps principles to platform, identity and security automation.
• Support day-to-day operations, troubleshoot incidents and resolve IAM and platform-related issues.
• Contribute to monitoring, documentation, testing, change management and operational readiness activities.

Collaboration and Stakeholder Engagement

• Work closely with team members to plan, deliver and support identity and automation initiatives.
• Collaborate with cross-functional teams, organizations, vendors and technology partners to resolve issues and deliver outcomes.
• Communicate technical matters clearly to both technical and non-technical stakeholders.
• Share knowledge, support teammates and contribute positively to a collaborative and inclusive team culture.
• Participate in on-call, incident response or other operational support arrangements where required.

Required Skills and Experience:

Core Requirements

• Degree in Computer Science, Computer Engineering, Information Technology, Engineering or a related discipline, or an equivalent combination of relevant qualifications and professional experience.
• At least 2 years of experience in IAM, platform engineering, automation or a related field.
• Experience with directory and identity services, such as Active Directory, LDAP, AD FS and Microsoft Entra ID.
• Strong understanding of identity and federation protocols, including SAML, OAuth and OpenID Connect. Knowledge of Kerberos is an advantage.
• Experience using Microsoft Graph API for identity management, integration or automation tasks.
• Proficiency in scripting and automation using PowerShell, Python or similar technologies.
• Knowledge of identity governance, access management and compliance requirements.
• Strong troubleshooting, analytical and problem-solving skills.
• Good written and verbal communication skills.
• Demonstrated ability to work effectively as a team player in a collaborative, multi-stakeholder environment.
• Willingness to support the operations and continuous improvement of enterprise identity services.

Preferred Qualifications

• Microsoft Certified: Identity and Access Administrator Associate.
• Microsoft Certified: Azure Security Engineer Associate.
• Relevant Azure, AWS or DevOps certifications.
• Experience supporting identity federation or shared identity platforms across multiple organizations or agencies.
• Knowledge of, and practical experience working with, enterprise identity platforms, together with architectural experience designing and integrating identity solutions in government, regulated or large enterprise environments.

Key Attributes:

• Collaborative team player with a service-oriented mindset.
• Proactive, accountable and committed to continuous improvement.
• Able to balance security, reliability, usability and operational requirements.
• Comfortable working across technical domains and engaging diverse stakeholders.
• Willing to learn, share knowledge and contribute to a positive team culture.