Identity & Access Principal Engineer

About the role

We are seeking an experienced Identity & Access Principal Engineer to join our Technology team. In this senior technical authority role you will shape and secure the identity and access management platforms that support colleagues and branches across the Post Office network.

Key responsibilities

• Provide technical leadership for the enterprise identity and access management estate.
• Design, implement and maintain solutions such as Active Directory, Entra ID, Microsoft Identity Manager, Conditional Access, ADFS and Microsoft PKI.
• Collaborate with Cyber Security, Architecture, project delivery teams and managed service providers to align services with business and security objectives.
• Drive platform improvements, support strategic technology initiatives and ensure resilience, scalability and compliance.
• Lead major incident, problem management and root‑cause analysis activities.

Required profile

• Significant experience in senior infrastructure or platform engineering within a large, complex enterprise.
• Proven ability to produce and review technical designs, operational documentation and support models.
• Strong stakeholder management and communication skills, capable of influencing at all levels.
• Analytical mindset with a balance of strategic thinking and hands‑on delivery.

Required skills

• Active Directory
• Entra ID
• Microsoft Identity Manager (MIM)
• Conditional Access
• ADFS
• Microsoft PKI
• PowerShell

What we offer

• Competitive salary plus up to 18% on‑target bonus.
• 27.5 days annual leave (rising to 30 after 2 years) plus bank holidays.
• Annual car allowance and generous pension with minimum 10% employer contribution.
• Access to 24/7 digital GP services, employee assistance programme, life assurance and income protection.
• Over 400 online courses, mentoring, apprenticeships and development programmes.