Devops Engineer (Identity and Access Management (IAM) in Sheffield

Responsibilities

• Design, build, and maintain CI/CD pipelines for IAM components, policies, connectors, microservices, and integrations.
• Enable automated testing, security scanning, and controlled deployments across DEV/TEST/PROD environments.
• Implement continuous improvement to streamline IAM release processes.
• Develop and maintain IaC with Terraform and Ansible for deploying IAM infrastructure, identity policies, directories, and supporting platforms.
• Ensure consistent, repeatable environments and compliance with architectural standards.
• Develop scripts and automation for account life‑cycle operations, access provisioning, and system integrations.
• Build and maintain CI/CD pipelines for .NET and configuration‑based deployments (e.g., Azure DevOps, GitHub Actions, Jenkins).
• Automate environment provisioning and configuration using IaC (e.g., Terraform, ARM/Bicep) and configuration management (e.g., Ansible, DSC).
• Implement automated deployment patterns for IAM components: MIM rules extensions/services; scheduled jobs and supporting utilities; database changes (versioned SQL scripts, DACPAC where appropriate).
• Support secure delivery practices: secrets management, least privilege, vulnerability remediation, audit‑ready controls.
• Collaborate with L2/L3 teams to convert recurring incidents into automation and permanent fixes.
• Embed security into the build and deployment process, including vulnerability scanning, secrets detection, and code quality checks.
• Work with cybersecurity teams to ensure compliance with Zero Trust principles and IAM security policies.
• Collaborate with IAM architects, security teams, and application owners on design and integration requirements.
• Create and maintain documentation for pipelines, IaC, deployment patterns, and operational processes.

Qualifications (Key Skills)

• Infrastructure as code (Terraform & GCP Provisioning); policy as code; manage and write policies.
• Proven experience in a DevOps/SRE/Platform Engineering role supporting enterprise applications.
• Strong hands‑on experience with CI/CD and source control (Git), including release pipelines and environment promotion.
• Working knowledge of .NET build/release processes and dependency management.
• Strong SQL Server experience for deployment automation and troubleshooting (schema changes, performance awareness).
• Strong experience with Visual Studio (2019/2022): building and troubleshooting solutions, MSBuild, test runners.
• Scripting skills (PowerShell strongly preferred; Python desirable).
• Experience implementing monitoring/alerting and operational runbooks.
• DevSecOps & platform security: security scanning, IAM and identity, network security, compliance.
• Release engineering and governance: release ops, change management, documentation.
• Regionalisation and compliance: regional deployments and failover, data residency, conditional access.
• Experience with tools such as GitHub, Jenkins, Ansible, Nexus.