Infrastructure Solution Designer in Salford

About the Role

As a designer, you will be driving the technical and architectural decisions and establishing the guardrails for the business across both Private Cloud and Identity Services—shaping the private cloud infrastructure estate as well as the Identity Services that span public and private cloud environments. You will be working with the wider business to ensure we are building scalable, secure and reliable systems for our customers and working with the existing architecture, security, engineering and 3rd party teams to ensure we are following both industry and PXC best practices.

Key Responsibilities

• Architecture, Design & Engineering – Create, review, and support high‑level and low‑level designs across identity and on‑premise infrastructure domains.
• Design secure architectures and target‑state solutions for private cloud infrastructure, Identity & Access Management (IAM), Email services, and End User Compute (EUC) including MDM and VDI.
• Develop and promote repeatable design patterns to improve application security, resiliency, development velocity, and cost efficiency.
• Ensure all solutions embed connectivity, security, and compliance requirements from inception.
• Continuously analyse existing private cloud/on‑prem infrastructure, and identity solutions across public and private cloud against evolving security principles and best practices.
• Act as an SME for private cloud infrastructure and identity services across public and private cloud.
• Support the definition and maintenance of IAM and EUC architecture blueprints aligned with security policies and standards.
• Work closely with Enterprise, Security, and Application Architects, as well as 3rd parties, to ensure designs meet security, connectivity, and business requirements.
• Engage with business analysts, project managers, and stakeholders to translate business needs into effective cloud and identity deployments.
• Support delivery teams with guidance, knowledge sharing, and bridging skill gaps across cloud and identity technologies.
• Drive modern engineering practices across the lifecycle, including DevSecOps, automation testing, application security, and tooling to support secure, scalable deployments.
• Evaluate technical risks and define mitigation and placement strategies for both cloud and identity solutions.
• Advise on architecture decisions that support the strategic goals of the business across infrastructure and identity domains.

What Will Make You Successful in This Role?

• 5+ years’ experience designing and delivering solutions across private cloud infrastructure and identity platforms.
• Strong experience with VMware/Hyper‑V, virtualised environments, multitenant platforms, storage, and modern private cloud technologies.
• Expertise in IAM technologies, including Microsoft Entra ID (workforce & external), SSO, MFA, federation, and identity governance frameworks (e.g., ISO 24760).
• Strong knowledge of the Microsoft 365 ecosystem, including O365 administration, Exchange/Email, Intune, SharePoint, and related governance tools (e.g., Mimecast, DMARC).
• Experience designing and transforming large‑scale infrastructure and identity services across public and private cloud.
• Strong PaaS and SaaS experience related to identity and cloud infrastructure.
• Hands‑on experience in automation, orchestration, and CI/CD, including source control and configuration management best practices.
• Experience performing discovery and assessment of infrastructure and identity portfolios to create modernisation roadmaps aligned to business and IT priorities.
• Ability to define and interpret licensing requirements, including RHEL, Microsoft, and Oracle licensing models.
• Experience with FinOps principles for optimising cloud and identity service costs.
• Demonstrated adaptability across multiple toolsets and willingness to learn new technologies and processes.
• Strong ability to work collaboratively across cross-functional teams and with diverse stakeholders.
• Excellent written and verbal communication skills with the ability to explain complex cloud, infrastructure, and identity concepts clearly.

How we look after our employees

• Hybrid working policy offers flexibility to work from home as well as connecting with colleagues in accessible and collaborative office spaces.
• A starting holiday allowance of 25 days* holiday and up to 10 extra days* leave via the holiday purchase scheme Flex30.
• An additional 30 hours* of leave every year for you to use as you wish.
• Free private healthcare for all employees.
• Competitive pension scheme and opportunity to earn bonus.
• Free broadband for all employees plus gifts for major life events such as marriages and births.
• Flexible salary sacrifice scheme including dental, gym plus a huge range of shopping and leisure discounts to save cash.