Job Description
This role focuses on designing, building and securing a new UK-hosted identity platform to support a major identity separation and security modernisation programme. You will design and implement a new internet-facing PingFederate environment, integrate multi-factor authentication across critical services, and support Active Directory domain separation from a global shared environment to a locally managed UK platform. You will ensure identity services are resilient, compliant and aligned with UK-hosted infrastructure requirements, while improving user experience and supporting robust governance and documentation.
Responsibilities
Design, build and configure a new UK-hosted PingFederate environment to support secure authentication services.
Deploy internet-facing PingFederate services within a DMZ, ensuring robust security and resilience.
Design secure trust relationships between the UK PingFederate platform and existing corporate Ping environments.
Configure SAML and OpenID Connect integrations to support application migrations onto the new identity platform.
Support the implementation and optimisation of PingFederate, PingID and PingDirectory across the environment.
Implement Ping-based multi-factor authentication across business-critical applications to strengthen access security.
Integrate multi-factor authentication capabilities with CyberArk privileged access workflows.
Enable MFA-protected break-glass access to critical servers to support secure emergency access scenarios.
Support MFA integration for Cisco network device administration to secure network management access.
Migrate existing MFA solutions and proof-of-concept implementations into the strategic Ping platform.
Support identity consolidation and migration activities as part of the transition to UK-hosted services.
Assist with Active Directory migration from .COM to .NET domains, ensuring secure and seamless transitions.
Enable secure authentication for migrated users, applications and servers across the new platform.
Align identity services and configurations with UK-hosted infrastructure requirements and standards.
Implement self-service MFA credential management capabilities to improve user autonomy and reduce support overhead.
Develop and enhance user onboarding and identity lifecycle processes to improve consistency and control.
Support identity tagging and provisioning workflows to ensure accurate and efficient access management.
Produce clear and comprehensive Standard Operating Procedures to support ongoing operations.
Create Standard Work documentation to enable effective operational handover and support.
Review and improve existing runbooks and operational processes to align with the new identity platform.
Align global identity configurations and standards to ensure consistency and compliance across environments.Essential Skills
Strong, hands-on experience with Ping Identity technologies, including PingFederate, PingID, PingDirectory and PingDataSync.
In-depth knowledge of SAML 2.0, OAuth 2.0 and OpenID Connect protocols.
Proven experience designing and deploying multi-factor authentication architectures.
experience with Active Directory integration and migration, including domain separation activities.
Practical experience with RADIUS authentication services.
experience integrating identity platforms with CyberArk for privileged access management.
Strong understanding of DMZ and internet-facing authentication architectures.
Solid background in Identity and Access Management (IAM) principles and practices.
Ability to produce high-quality technical documentation, including SOPs, runbooks and standard work.
experience working with Windows Server and enterprise authentication technologies.
experience working with Cisco network environments in the context of secure access and MFA.Additional Skills & Qualifications
experience in large-scale identity consolidation and migration programmes.
Exposure to identity lifecycle management, including user onboarding, provisioning and deprovisioning.
Familiarity with designing and implementing self-service credential management capabilities.
experience aligning identity services with regional or local infrastructure and regulatory requirements.
Strong analytical and problem-solving skills, with the ability to troubleshoot complex authentication issues.
Clear communication skills, with the ability to collaborate effectively with security, infrastructure and application teams.Why Work Here?
You will join a world-leading engineering and technology organisation that invests heavily in modern, secure digital platforms. The environment encourages innovation, continuous improvement and the adoption of best-in-class security practices. You will have the opportunity to work on a high-profile transformation programme, collaborate with skilled professionals and develop your expertise in cutting-edge identity and access management technologies.
Work Environment
You will work within a modern enterprise environment focused on secure, UK-hosted infrastructure and advanced identity services. The role involves working with technologies such as PingFederate, PingID, PingDirectory, PingDataSync, CyberArk, Active Directory, RADIUS, Windows Server and Cisco network devices. You will operate in a security-conscious setting with internet-facing services deployed in a DMZ, following structured operational processes supported by SOPs and runbooks. The work pattern and specific hours may vary according to project needs, with a strong emphasis on reliability, documentation and collaboration across security, infrastructure and application teams.
Location
Bristol, UK
Rate/Salary
550.00 - 650.00 GBP Hourly
Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. (phone number removed). Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at (url removed)>
To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to (url removed)>
We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at (url removed)/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield
Salary description
£500.00 - £500.00 per hour