Senior Identity Infrastructure Engineer

This job is with Capgemini, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the job you’re considering We are seeking an experienced Senior Identity Infrastructure Engineer to support and maintain the core identity infrastructure platforms that underpin the organisation's Identity and Access Management (IDAM) services. The successful candidate will be responsible for the administration, support, security, and continuous improvement of the Active Directory, PKI, DNS, Group Policy, and authentication infrastructure. They will work closely with the wider IDAM team, supporting critical identity services and providing L2/L3 operational support across the identity estate where required. This role requires a highly capable infrastructure engineer with deep expertise in Microsoft Active Directory and Public Key Infrastructure (PKI), combined with a strong understanding of enterprise identity technologies and authentication services. The position is based 5 days per week within secure facilities in either Inverness or Manchester, working closely with security, engineering, and IDAM teams to ensure the availability, resilience, and security of critical identity platforms. Your role: Active Directory Infrastructure Administer and maintain enterprise Active Directory forests, domains, and domain controllers. Manage Active Directory Sites and Services, replication topology, trusts, and directory services infrastructure. Administer AD-integrated DNS and support authentication services across the enterprise. Manage and maintain Group Policy architecture, including policy design, implementation, troubleshooting, and lifecycle management. Support Active Directory backup, recovery, disaster recovery, and business continuity processes. Monitor platform health, performance, security, and replication. Support Active Directory upgrades, migrations, consolidation projects, and infrastructure improvements. Implement and maintain Active Directory security hardening standards and privileged access controls. Public Key Infrastructure (PKI) Administer and support Microsoft Active Directory Certificate Services (AD CS). Manage Certificate Authorities, certificate templates, certificate enrolment, and certificate lifecycle processes. Support Offline Root CA and Issuing CA infrastructure. Administer Certificate Revocation Lists (CRL), Authority Information Access (AIA), and certificate distribution services. Monitor certificate compliance, renewals, revocations, and expiration management. Maintain PKI operational documentation, recovery procedures, and security standards. Support cryptographic and certificate-related troubleshooting across infrastructure and security platforms. Identity Infrastructure therefore, you may be asked about your citizenship in the application process. Make it real – what does it mean for you? Flexibility to work your way You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. Your wellbeing You’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions. To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy. Shape your path You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more. Shared energy You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way. Why should you consider Capgemini? Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is. About Capgemini Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com