{"id":1804258,"url":"https://alion.io/job/capgemini-senior-identity-infrastructure-engineer","title":"Senior Identity Infrastructure Engineer","company":{"id":145,"name":"Capgemini","domain":"capgemini.com","url":"https://alion.io/company/capgemini","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":80,"open_postings":1798,"ghost_share":0.001,"stale_share":0.784,"repost_share":0.008,"time_to_fill_p50_days":28,"computed_at":"2026-10-23T05:54:15Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Inverness, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":111000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":60},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BeyondTrust","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows Server","optional":false},{"name":"AWS","optional":true},{"name":"Crowdstrike","optional":true},{"name":"ITIL","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-09-17T09:53:51Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-23T23:09:09Z","board_verified":true,"closed_at":null,"days_open":36,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":36},"description":"About the job you’re considering\nWe are seeking an experienced Senior Identity Infrastructure Engineer to support and maintain the core identity infrastructure platforms that underpin the organisation's Identity and Access Management (IDAM) services.\nThe successful candidate will be responsible for the administration, support, security, and continuous improvement of the Active Directory, PKI, DNS, Group Policy, and authentication infrastructure. They will work closely with the wider IDAM team, supporting critical identity services and providing L2/L3 operational support across the identity estate where required.\nThis role requires a highly capable infrastructure engineer with deep expertise in Microsoft Active Directory and Public Key Infrastructure (PKI), combined with a strong understanding of enterprise identity technologies and authentication services.\nThe position is based 5 days per week within secure facilities in either Inverness or Manchester, working closely with security, engineering, and IDAM teams to ensure the availability, resilience, and security of critical identity platforms.\nYour role:\nActive Directory Infrastructure\nAdminister and maintain enterprise Active Directory forests, domains, and domain controllers.\nManage Active Directory Sites and Services, replication topology, trusts, and directory services infrastructure.\nAdminister AD-integrated DNS and support authentication services across the enterprise.\nManage and maintain Group Policy architecture, including policy design, implementation, troubleshooting, and lifecycle management.\nSupport Active Directory backup, recovery, disaster recovery, and business continuity processes.\nMonitor platform health, performance, security, and replication.\nSupport Active Directory upgrades, migrations, consolidation projects, and infrastructure improvements.\nImplement and maintain Active Directory security hardening standards and privileged access controls.\nPublic Key Infrastructure (PKI)\nAdminister and support Microsoft Active Directory Certificate Services (AD CS).\nManage Certificate Authorities, certificate templates, certificate enrolment, and certificate lifecycle processes.\nSupport Offline Root CA and Issuing CA infrastructure.\nAdminister Certificate Revocation Lists (CRL), Authority Information Access (AIA), and certificate distribution services.\nMonitor certificate compliance, renewals, revocations, and expiration management.\nMaintain PKI operational documentation, recovery procedures, and security standards.\nSupport cryptographic and certificate-related troubleshooting across infrastructure and security platforms.\nIdentity Infrastructure & Authentication Services\nSupport Microsoft Entra Connect and hybrid identity infrastructure.\nMaintain LDAP, LDAPS, Kerberos, and NTLM authentication services.\nSupport integrations between Active Directory and enterprise identity platforms including MIM, Entra ID, Okta, and BeyondTrust.\nAssist with identity-related service improvements and platform optimisation initiatives.\nSupport authentication, directory, and identity infrastructure incidents through to resolution.\nWork collaboratively with the IDAM engineering team to support critical identity lifecycle services.\nIDAM Support Activities\nProvide L2/L3 support for identity-related incidents and service requests.\nAssist with troubleshooting user provisioning, synchronisation, and authentication issues.\nSupport MIM, Entra ID, Okta, and BeyondTrust integrations where infrastructure expertise is required.\nCollaborate with IDAM engineers to investigate root causes and implement long-term solutions.\nSupport operational activities across the wider identity ecosystem during periods of increased demand.\nAutomation & Continuous Improvement\nDevelop and maintain PowerShell automation for identity infrastructure administration.\nDrive service improvements, platform optimisation, and operational efficiencies.\nContribute to security improvement initiatives, vulnerability remediation, and infrastructure modernisation.\nProduce and maintain technical documentation, operational procedures, and support runbooks.\nYou can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.\nYour skills and experience\nActive Directory\nExtensive hands-on experience administering enterprise Active Directory environments.\nStrong knowledge of:\nActive Directory Domain Services (AD DS)\nActive Directory Sites and Services\nForest and Domain Administration\nDNS\nGroup Policy\nLDAP / LDAPS\nKerberos Authentication\nTrusts and Replication\nAD Backup and Recovery\nExperience troubleshooting complex authentication and directory service issues.\nPKI\nStrong experience administering Microsoft Active Directory Certificate Services (AD CS).\nExperience managing:\nCertificate Authorities\nCertificate Templates\nCRL and AIA Infrastructure\nCertificate Lifecycle Management\nCertificate Enrolment Services\nKey Recovery and Archival\nExperience supporting enterprise PKI environments.\nInfrastructure Platforms\nWindows Server 2016/2019/2022 administration.\nPowerShell scripting and automation.\nSecurity hardening and privileged administration.\nHigh Availability and Disaster Recovery planning.\nInfrastructure monitoring and operational support.\nIdentity Technologies\nWorking knowledge of:\nMicrosoft Entra ID\nMicrosoft Entra Connect / Cloud Sync\nMicrosoft Identity Manager (MIM)\nOkta\nBeyondTrust\nUnderstanding of:\nIdentity and Access Management (IAM)\nJoiner, Mover, Leaver Processes\nIdentity Lifecycle Management\nAuthentication and Authorisation\nAccess Governance\nRole-Based Access Control (RBAC)\nDesirable Skills\nExperience supporting Microsoft Identity Manager (MIM).\nExperience supporting hybrid identity architectures.\nExperience with Okta administration and integration.\nKnowledge of BeyondTrust PAM or Endpoint Privilege Management.\nExperience with Tier 0 administration and privileged access models.\nFamiliarity with CrowdStrike, Zscaler, and security platform integrations.\nExperience supporting highly regulated or secure environments.\nKnowledge of ITIL-based operational support models.\nExperience supporting large-scale enterprise identity programmes.\nWe are a Disability Confident Employer\nCapgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:\nDeclare they have a disability, and\nMeet the minimum essential criteria for the role.\nPlease opt in during the application process.\nYour security clearance and pre-employment checks\nIf you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)\nSome roles will also require an additional level of security clearance:\nSecurity Check (SC) Clearance:\nTo be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.\nTo obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.\nThroughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.\nSome posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.\nMake it real - what does it mean for you?\nFlexibility to work your way\nYou will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.\nYour wellbeing\nYou’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions.\nTo help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.\nShape your path\nYou will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.\nShared energy\nYou’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.\nWhy should you consider Capgemini?\nGrowing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.\nAbout Capgemini\nCapgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com","description_format":"text","description_chars":10721,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Systems Integrators","Management Consulting","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-03T18:53:24Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Graduate Trainee, Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Graduate Trainee; Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-23T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.509,"p_room":0.55,"age_days":35,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/capgemini-senior-identity-infrastructure-engineer","json_url":"https://alion.io/job/capgemini-senior-identity-infrastructure-engineer.json","meta":{"generated_at":"2026-10-24T00:32:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":793,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":145},"rest":"https://alion.io/mcp/rest/get_company?id=145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcapgemini-senior-identity-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcapgemini-senior-identity-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcapgemini-senior-identity-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/capgemini-senior-identity-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcapgemini-senior-identity-infrastructure-engineer"}]}