Base Location: You'll be expected to spend 50% of your working week in one of the following locations: Reading / Forbury Place, Havant / Penner Road

Salary: £66,100 - £99,100 + car /car allowance + performance-related bonus + a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

The role

As a Lead Cloud Platform Engineer, you will be responsible for the delivery and ongoing oversight of Identity and Access Management (IAM) platforms. Responsible for designing and implementing the technical components of the identity strategy within SSE’s environment, you will work closely with cross-functional teams to architect robust, scalable, and secure Identity frameworks that align with business requirements and best practices in cloud. Providing leadership, team management and vision in the delivery of SSE’s Identity services, the role is responsible and accountable for ensuring that SSE’s technical services portfolio meets its customer’s requirements, regulatory and security policies.

You will

• Work with colleagues across the organisation including Architecture, Cyber Defence, Risk and Control on the delivery of SSE’s IAM strategy, and share insight on best practices
• Provide technology governance, overseeing the selection, implementation, and maintenance of IAM technologies, drive the integration of IAM solutions with existing IT infrastructure, ensuring continuity of existing IAM processes.
• Support health and hygiene deliverables to reduce Operational risk across the core platforms such as Active Directory domains and address critical platform obsolescence.
• Collaborate on the strategic vision to modernise Identity and Access Management within SSE, delivering enhancement controls and greater governance for Privileged Access Management.
• Provide team leadership and management for the Identity team members

You have

• Deep understanding of IAM concepts, technologies or directory services, spanning the adoption and use of solutions such as Microsoft EntraID, Okta or Ping
• Knowledge of Access Management (AM), Identity Governance and Administration (IGA), Privileged Access Management (PAM) and Directory Services (DS) to be able to manage and guide the delivery of identity platforms
• Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect)
• Understanding of Public Key Infrastructure (PKI) and digital certificates
• Awareness of security assurance and design best practices i.e. NIST or CIS.