Platform Operations Engineer

Key Responsibilities:

Identity and Access Management

• Design, implement, configure and maintain IAM solutions across the organization
• Support the delivery, operation and continuous improvement of enterprise identity solutions used by multiple organizations and stakeholders
• Configure and manage identity brokering and federation products, with a focus on the Microsoft ecosystem, including Active Directory, AD FS, Public Key Infrastructure and Microsoft Entra ID
• Implement and manage authentication and authorization protocols, including Kerberos, SAML, OAuth and OpenID Connect
• Use Microsoft Graph API to support identity administration, integration and automation
• Ensure the security, resilience, governance and compliance of identity platforms

Platform Automation and Operations

• Develop and maintain scripts, tools and automation to reduce operational toil and eliminate repetitive manual tasks
• Build and maintain platform and deployment automation using appropriate scripting, configuration management and CI/CD practices
• Apply DevSecOps principles to platform, identity and security automation
• Support day-to-day operations, troubleshoot incidents and resolve IAM and platform-related issues
• Contribute to monitoring, documentation, testing, change management and operational readiness activities

Collaboration and Stakeholder Engagement

• Work closely with team members to plan, deliver and support identity and automation initiatives
• Collaborate with cross-functional teams, organizations, vendors and technology partners to resolve issues and deliver outcomes
• Communicate technical matters clearly to both technical and non-technical stakeholders
• Share knowledge, support teammates and contribute positively to a collaborative and inclusive team culture
• Participate in on-call, incident response or other operational support arrangements where required

Requirements:

• Degree in Computer Science, Computer Engineering, Information Technology, Engineering or a related discipline, or an equivalent combination of relevant qualifications and professional experience
• At least 2 years of experience in IAM, platform engineering, automation or a related field
• Experience with directory and identity services, such as Active Directory, LDAP, AD FS and Microsoft Entra ID
• Strong understanding of identity and federation protocols, including SAML, OAuth and OpenID Connect. Knowledge of Kerberos is an advantage
• Experience using Microsoft Graph API for identity management, integration or automation tasks
• Proficiency in scripting and automation using PowerShell, Python or similar technologies
• Knowledge of identity governance, access management and compliance requirements
• Strong troubleshooting, analytical and problem-solving skills
• Good written and verbal communication skills
• Demonstrated ability to work effectively as a team player in a collaborative, multi-stakeholder environment
• Willingness to support the operations and continuous improvement of enterprise identity services

Preferred Qualifications:

• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Security Engineer Associate
• Relevant Azure, AWS or DevOps certifications
• Experience supporting identity federation or shared identity platforms across multiple organizations or agencies
• Knowledge of, and practical experience working with, enterprise identity platforms, together with architectural experience designing and integrating identity solutions in government, regulated or large enterprise environments

Key Attributes

• Collaborative team player with a service-oriented mindset
• Proactive, accountable and committed to continuous improvement
• Able to balance security, reliability, usability and operational requirements
• Comfortable working across technical domains and engaging diverse stakeholders
• Willing to learn, share knowledge and contribute to a positive team culture