At a Glance
- Tasks: Strengthen cyber security by managing Identity & Access Management controls and onboarding applications.
- Company: Join Booker, the UK's leading food & drink wholesaler with a focus on innovation.
- Benefits: Enjoy discounts, health support, generous holidays, and a retirement savings plan.
- Other info: Diversity and inclusion are at our core; flexible working options available.
- Why this job: Make a real impact on security while working with cutting-edge technology.
- Qualifications: Knowledge of IAM principles and experience with SSO technologies required.
The predicted salary is between 30000 - 40000 £ per year.
About the Role
At Booker, we’re building secure, reliable technology that helps our colleagues serve customers better every day.
As a Systems Engineer I within the Booker Technology Infrastructure team, you will strengthen Booker’s cyber security posture through the delivery and support of Identity & Access Management (IAM) controls.
Working closely with internal technology teams and third‑party suppliers, you will onboard applications into Booker’s Single Sign‑On (SSO) platform, support Privileged Access Management (PAMS) onboarding, and maintain evidence required for compliance against Tesco’s Layered Defence Model (LDM).
Your work will drive improvements in access governance, authentication controls, and privileged access processes, ensuring solutions are secure, auditable, and operationally effective.
Responsibilities
- Onboard applications into Booker’s SSO platform and verify SAML/OIDC configuration requirements.
- Perform authentication testing, troubleshooting, and maintain accurate records of SSO integrations.
- Support onboarding of colleagues, third parties, and systems into the PAMS solution.
- Assist with access reviews, governance activities, and ensure privileged access is controlled, documented, and auditable.
- Help system owners complete LDM assessments and collect, maintain, and organise evidence for security assurance activities.
- Identify gaps, drive remediation actions, and improve compliance scores while maintaining system inventories and supporting documentation.
Qualifications
- Understanding of Identity & Access Management principles.
- Experience with Single Sign‑On technologies (SAML, OIDC, or OAuth).
- Knowledge of Privileged Access Management concepts.
- Strong organisational skills and ability to manage multiple onboarding activities simultaneously.
- Experience working with suppliers and stakeholders to collect technical requirements.
- Good documentation and evidence management skills.
- Understanding of cyber security governance, compliance, or audit activities.
- Strong communication and problem‑solving skills.
- Proactive and detail‑oriented approach to security and continuous improvement.
Benefits
- Booker colleague card with 10% off purchases and double discounts up to three times a year.
- After 3 months service, a Tesco colleague discount card with tiered benefits and additional discounts at Tesco Café and F&F purchases.
- 10% off pay monthly and SIM‑only deals with Tesco Mobile.
- Up to 30% off car, pet, and home insurance at Tesco Bank.
- Free eye test with savings on glasses, prescription sunglasses, and contact lenses.
- 50% off health checks at Tesco Pharmacy.
- Exclusive discounted RAC breakdown cover rates.
- Access to a deals and discounts website for everyday purchases.
- Participation in annual Save As You Earn share scheme after 3 months service.
- Retirement savings plan (pension) with up to 5% match from Booker.
- Life Assurance covering up to three times annual pay.
- Health and Wellbeing support, including a 24/7 confidential Employee Assistance Programme and Virtual GP.
- Generous holiday package.
About Us
Booker is the UK’s leading food & drink wholesaler, serving independent retailers, caterers, and small businesses from 190 cash and carry branches, eight distribution centres, five Best Food Logistics sites, and six support centre locations across the UK.
Diversity, Equity and Inclusion (DE&I) is central to Booker’s culture.
We welcome conversations about flexible working to support the varied needs of our team throughout their careers.
We’re proud that Booker is a Disability Confident Committed Leader and we’re committed to providing a fully inclusive and accessible recruitment process.
For further information on the accessibility support you can expect, please contact recruitment@bookergroup. com
Please note we can only accept candidates over the age of 18 if the role requires working before 6:15 am or after 9:45 pm, or involves working in areas such as the warehouse, beers, wines & spirits, and driving roles.
On occasions where the recruitment team receives high volumes of applicants, some roles may close earlier than the advertised end date to manage all applications appropriately.
We will only be able to offer individual feedback to those candidates who attend an interview.
#J-18808-Ljbffr
Systems Engineer I SSO/LDM/PAMS in Wellingborough employer: Booker
Booker is an excellent employer, offering a dynamic work environment in England where you can lead a dedicated team to achieve operational excellence. With a strong focus on employee development and customer service, you'll benefit from a range of perks including discounts and a retirement savings plan, all while being part of a culture that values motivation and strategic planning.
