UK Health Security Agency

Team Manager – Identity & Access Management (IAM)

Information:

This job is now closed

Job summary

Job title - Team Manager - Identity & Access Management (IAM)

Profession- Workplace Platforms

Directorate - Technology

Full Time equivalent - 37.5 hours

No of Roles - 1

Contract Type - Permanent

Location - Home Working /local office hybrid, with travel to other UKHSA sites as required

UKHSA offers hybrid working or home working for its employees - this means that whilst the role will be based in one of our UKHSA offices, there will be opportunities for an element of working from home. The balance between home and workplace working is to be agreed with the line manager, determined primarily by business need and in line with departmental policy. Some business travel will be required to other UKHSA offices.Please be aware that this role can only be worked from within the UK and not overseas. Relocation expenses are not available

Working Pattern - Full Time / Part Time / Job Share / Flexible Working / Hybrid Working

Grade & Salary - Grade 7 Upper National banding - £56,770 - £58,769 per annum. Outer London - £58,694- £60,528 per annum. Inner London - £60,574- £62,286 per annum.

New entrants to the Civil Service are expected to start on the minimum of the pay band.

The internal roles rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest.

.

Main duties of the job

The Team Manager will be responsible for a team of ICT specialist engineers and domain architects tasked with delivering high quality services across a range of service lines to support effective and efficient working across UKHSA. The post holder will be highly skilled and qualified in multiple specialist area, which will enable them to provide the support, guidance and expertise needed to lead a high functioning, diverse team of technical specialists.

The post holder will be responsible for ensuring the availability and performance of their service lines and will manage the team resources to ensure that each system is supported by an engineer with the appropriate skillset, capability and experience to deliver a service that meets quality expectations and all agreed standards.

The Team Manager will undertake specialist engineering tasks as and when required but will maintain an overview of all systems under their control in order to provide the Head of Workplace Platforms with an informed appraisal of each service line and any supporting actions.

About us

The Technology Directorate provides business-critical systems and services to UKHSA business users at all locations at which UKHSA staff work. ICT has primary responsibility for technical infrastructure and the corporate services running upon it. ICT has staff at a number of locations throughout UKHSA.

Details

Date posted

07 August 2023

Pay scheme

Other

Salary

£56,770 to £58,769 a year PER ANNUM

Contract

Permanent

Working pattern

Full-time, Part-time, Job share, Flexible working, Home or remote working

Reference number

UKHSA00180

Job locations

Colindale

London

NW9 5EQ


Job description

Job responsibilities

  • To lead and manage the service line team and ensure that resources are allocated effectively to provide optimum levels of availability during working hours, and provision of an appropriate emergency cover service for all other times.
  • Ensure that any service failures are responded to rapidly so that services are restored within the agreed service level and the impact on the business area is minimized.
  • Contribute to strategic development, providing expert advice and knowledge in areas of responsibility. Identify opportunities for improvement and provide supporting evidence.
  • Based on knowledge of the services managed, create a plan for the provision of services so as to maintain the security, integrity and continuous availability of UKHSA systems and data to users on the UKHSA network.
  • Take responsibility for designing, planning, implementing, configuring and commissioning hardware and software components for own service lines and work with other areas of ICT to ensure that these meet consistent standards across UKHSA Technology architecture.
  • Responsible for designing, planning, implementing, configuring and commissioning performance and capacity monitoring systems for own service lines.
  • Provide advice, guidance and training to other areas of ICT to ensure continuity of delivery of services for all service lines.
  • Ensure that appropriate documentation is created and maintained, to UKHSA quality standards, for all the connectivity, components, configurations and operation of the service lines managed. The documentation must be kept up-to-date and in an auditable condition.
  • Comply with UKHSA ICT Security and other relevant policies in the operation and use of UKHSA ICT infrastructure.

To conduct such work as directed by line management consistently with departmental quality procedures and standards and to agreed timescales.

Other

The above is only an outline of the tasks, responsibilities and outcomes required of the role. You will carry out any other duties as may reasonably be required by the directorate.

The job description and person specification may be reviewed on an ongoing basis in accordance with the changing needs of the organisation.

Professional development

You should pursue a programme of continuous professional development in accordance with any relevant professional registration or statutory requirements, while maintaining appropriate awareness of service provider requirements.

Essential Criteria

As a modern Identity and Access Management (IAM) team leader, having a strong technical background is essential to effectively lead and guide your team. Here are some key technical skills and experience that a modern IAM team leader should possess:

  • You should have a deep understanding of IAM technologies and solutions, including identity management systems, access management systems, single sign-on (SSO), multi-factor authentication (MFA), privilege access management (PAM), and directory services.
  • Educated to degree level in relevant subject or equivalent level of experience of working at a similar level in specialist area
  • Familiarity with popular IAM platforms such as Azure Active Directory, AWS SSO is valuable.
  • A comprehensive knowledge of identity protocols and standards is crucial. This includes protocols like OAuth, OpenID Connect, SAML, LDAP, and SCIM. Understanding how these protocols work and their application in different scenarios is important for designing and implementing secure IAM solutions.
  • Experience with legacy systems and migration, specifically in transitioning from LDAP and Kerberos to OpenID/Cloud is beneficial.
  • Experience with SaaS and multi-cloud operations, including integration of different cloud identity providers and secure access management is desirable.
  • Experience in leading teams and project management, including coordination with stakeholders and delivering IAM solutions aligned with business objectives is essential
  • Good understanding of latest IAM trends, technologies, and best practices.

Desirable Experience

  • Good understanding of Microsoft 365 service (desirable)
  • Experience with DevOps and CI/CD to automate IAM tasks and ensure efficient and secure system deployments.
  • Formal technical qualification, e.g. MCSE or equivalent

Remember, while technical expertise is crucial, as an IAM team leader, you should also possess strong leadership, communication, and project management skills. Balancing technical knowledge with the ability to collaborate, mentor, and guide your team is essential for success in this role.

We pride ourselves as being an employer of choice, where Everyone Matters promoting equality of opportunity to actively encourage applications from everyone, including groups currently underrepresented in our workforce.

UKHSA ethos is to be an inclusive organisation for all our staff and stakeholders. To create, nurture and sustain an inclusive culture, where differences drive innovative solutions to meet the needs of our workforce and wider communities. We do this through celebrating and protecting differences by removing barriers and promoting equity and equality of opportunity for all.

Selection Process

Stage 1: Application & SiftThis vacancy is using Success Profiles, and will assess your Behaviours and Experience.

As part of the application process you will be asked to provide a Personal Statement / Statement of Suitability in no more than 500 words. We will be assessing essential criteria at sift.

This should outline your skills, experience, and achievements, providing evidence of your suitability for the role, with particular reference to the Experience criteria or the essential criteria (outlined in the person specification section).

You will also be asked to provide information within the Employer/ Activity history section of the application form. This is equivalent to the information you would provide on a CV, setting out your career history. This will be used in the sifting process and will be scored.

If you are successful at this stage, you will progress to interview

No feedback will be given at this stage

Stage 2: Panel Interview

All applicants that progress to interview will be assessed on behaviours / experience / technical / ability through Success Profiles. The Interview can be conducted remotely or face to face. You will be required to prepare a presentation

The Behaviours tested during the interview stage will be:

  • Leadership
  • Seeing the Big Picture
  • Managing a Quality Service

Benefits

  • Alongside your salary of £49,592, UK Health Security Agency contributes £13,390 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Range of health and wellbeing support

Any move to UKHSA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare.

Reserve List:

Candidates who pass the interview criteria but are not offered a post will be kept on a reserve list for 12 months and may be contacted if similar roles become available.

If you are interviewed for the post and do not meet the required threshold for the specified grade, your application may be assessed against a similar, lower grade role and you may be offered the post should one be available.

DBS - People working with government systems must complete Basic Personnel Security Standard (BPSS) checks which includes a disclosure and barring security check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed for this role is BPSS however there may be a requirement for this role to be SC cleared and you should familiarise yourself with the criteria of security clearance.

This role is Open to all external applicants (anyone) from outside the Civil Service (including by definition internal applicants. Appointments to roles within UKHSA will be made in accordance with the Civil Service nationality rules. These can be found athttps://www.gov.uk/government/publications/nationality-rulesThis job is broadly open to the following groups:

  • UK nationals
  • Nationals of Commonwealth countries who have the right to work in the UK
  • Nationals of the Republic of Ireland
  • Nationals from the EU, EEA or Switzerland with settled or pre-settled status or who apply for either status by the deadline of theEuropean Union Settlement Scheme (EUSS)
  • Relevant EU, EEA, Swiss or Turkish nationals working in the Civil Service
  • Relevant EU, EEA, Swiss or Turkish nationals who have built up the right to work in the Civil Service
  • Certain family members of the relevant EU, EEA, Swiss or Turkish nationals

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's Recruitment Principles.

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Government baseline personnel security standard

Its important to note that there are currently exceptions to applications being considered if your conviction relates to any of the following:

  • life sentences
  • arson
  • sexual offences
  • hate and terror offences

Some departments will also consider the specific offence against the nature of the business, i.e., a conviction for fraud may rule you out for a finance role

Contact Details Sophie.Rigney@reed.com

Job description

Job responsibilities

  • To lead and manage the service line team and ensure that resources are allocated effectively to provide optimum levels of availability during working hours, and provision of an appropriate emergency cover service for all other times.
  • Ensure that any service failures are responded to rapidly so that services are restored within the agreed service level and the impact on the business area is minimized.
  • Contribute to strategic development, providing expert advice and knowledge in areas of responsibility. Identify opportunities for improvement and provide supporting evidence.
  • Based on knowledge of the services managed, create a plan for the provision of services so as to maintain the security, integrity and continuous availability of UKHSA systems and data to users on the UKHSA network.
  • Take responsibility for designing, planning, implementing, configuring and commissioning hardware and software components for own service lines and work with other areas of ICT to ensure that these meet consistent standards across UKHSA Technology architecture.
  • Responsible for designing, planning, implementing, configuring and commissioning performance and capacity monitoring systems for own service lines.
  • Provide advice, guidance and training to other areas of ICT to ensure continuity of delivery of services for all service lines.
  • Ensure that appropriate documentation is created and maintained, to UKHSA quality standards, for all the connectivity, components, configurations and operation of the service lines managed. The documentation must be kept up-to-date and in an auditable condition.
  • Comply with UKHSA ICT Security and other relevant policies in the operation and use of UKHSA ICT infrastructure.

To conduct such work as directed by line management consistently with departmental quality procedures and standards and to agreed timescales.

Other

The above is only an outline of the tasks, responsibilities and outcomes required of the role. You will carry out any other duties as may reasonably be required by the directorate.

The job description and person specification may be reviewed on an ongoing basis in accordance with the changing needs of the organisation.

Professional development

You should pursue a programme of continuous professional development in accordance with any relevant professional registration or statutory requirements, while maintaining appropriate awareness of service provider requirements.

Essential Criteria

As a modern Identity and Access Management (IAM) team leader, having a strong technical background is essential to effectively lead and guide your team. Here are some key technical skills and experience that a modern IAM team leader should possess:

  • You should have a deep understanding of IAM technologies and solutions, including identity management systems, access management systems, single sign-on (SSO), multi-factor authentication (MFA), privilege access management (PAM), and directory services.
  • Educated to degree level in relevant subject or equivalent level of experience of working at a similar level in specialist area
  • Familiarity with popular IAM platforms such as Azure Active Directory, AWS SSO is valuable.
  • A comprehensive knowledge of identity protocols and standards is crucial. This includes protocols like OAuth, OpenID Connect, SAML, LDAP, and SCIM. Understanding how these protocols work and their application in different scenarios is important for designing and implementing secure IAM solutions.
  • Experience with legacy systems and migration, specifically in transitioning from LDAP and Kerberos to OpenID/Cloud is beneficial.
  • Experience with SaaS and multi-cloud operations, including integration of different cloud identity providers and secure access management is desirable.
  • Experience in leading teams and project management, including coordination with stakeholders and delivering IAM solutions aligned with business objectives is essential
  • Good understanding of latest IAM trends, technologies, and best practices.

Desirable Experience

  • Good understanding of Microsoft 365 service (desirable)
  • Experience with DevOps and CI/CD to automate IAM tasks and ensure efficient and secure system deployments.
  • Formal technical qualification, e.g. MCSE or equivalent

Remember, while technical expertise is crucial, as an IAM team leader, you should also possess strong leadership, communication, and project management skills. Balancing technical knowledge with the ability to collaborate, mentor, and guide your team is essential for success in this role.

We pride ourselves as being an employer of choice, where Everyone Matters promoting equality of opportunity to actively encourage applications from everyone, including groups currently underrepresented in our workforce.

UKHSA ethos is to be an inclusive organisation for all our staff and stakeholders. To create, nurture and sustain an inclusive culture, where differences drive innovative solutions to meet the needs of our workforce and wider communities. We do this through celebrating and protecting differences by removing barriers and promoting equity and equality of opportunity for all.

Selection Process

Stage 1: Application & SiftThis vacancy is using Success Profiles, and will assess your Behaviours and Experience.

As part of the application process you will be asked to provide a Personal Statement / Statement of Suitability in no more than 500 words. We will be assessing essential criteria at sift.

This should outline your skills, experience, and achievements, providing evidence of your suitability for the role, with particular reference to the Experience criteria or the essential criteria (outlined in the person specification section).

You will also be asked to provide information within the Employer/ Activity history section of the application form. This is equivalent to the information you would provide on a CV, setting out your career history. This will be used in the sifting process and will be scored.

If you are successful at this stage, you will progress to interview

No feedback will be given at this stage

Stage 2: Panel Interview

All applicants that progress to interview will be assessed on behaviours / experience / technical / ability through Success Profiles. The Interview can be conducted remotely or face to face. You will be required to prepare a presentation

The Behaviours tested during the interview stage will be:

  • Leadership
  • Seeing the Big Picture
  • Managing a Quality Service

Benefits

  • Alongside your salary of £49,592, UK Health Security Agency contributes £13,390 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Range of health and wellbeing support

Any move to UKHSA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare.

Reserve List:

Candidates who pass the interview criteria but are not offered a post will be kept on a reserve list for 12 months and may be contacted if similar roles become available.

If you are interviewed for the post and do not meet the required threshold for the specified grade, your application may be assessed against a similar, lower grade role and you may be offered the post should one be available.

DBS - People working with government systems must complete Basic Personnel Security Standard (BPSS) checks which includes a disclosure and barring security check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed for this role is BPSS however there may be a requirement for this role to be SC cleared and you should familiarise yourself with the criteria of security clearance.

This role is Open to all external applicants (anyone) from outside the Civil Service (including by definition internal applicants. Appointments to roles within UKHSA will be made in accordance with the Civil Service nationality rules. These can be found athttps://www.gov.uk/government/publications/nationality-rulesThis job is broadly open to the following groups:

  • UK nationals
  • Nationals of Commonwealth countries who have the right to work in the UK
  • Nationals of the Republic of Ireland
  • Nationals from the EU, EEA or Switzerland with settled or pre-settled status or who apply for either status by the deadline of theEuropean Union Settlement Scheme (EUSS)
  • Relevant EU, EEA, Swiss or Turkish nationals working in the Civil Service
  • Relevant EU, EEA, Swiss or Turkish nationals who have built up the right to work in the Civil Service
  • Certain family members of the relevant EU, EEA, Swiss or Turkish nationals

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's Recruitment Principles.

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Government baseline personnel security standard

Its important to note that there are currently exceptions to applications being considered if your conviction relates to any of the following:

  • life sentences
  • arson
  • sexual offences
  • hate and terror offences

Some departments will also consider the specific offence against the nature of the business, i.e., a conviction for fraud may rule you out for a finance role

Contact Details Sophie.Rigney@reed.com

Person Specification

Experience

Essential

  • oYou should have a deep understanding of IAM technologies and solutions, including identity management systems, access management systems, single sign-on (SSO), multi-factor authentication (MFA), privilege access management (PAM), and directory services
Person Specification

Experience

Essential

  • oYou should have a deep understanding of IAM technologies and solutions, including identity management systems, access management systems, single sign-on (SSO), multi-factor authentication (MFA), privilege access management (PAM), and directory services

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Additional information

Disclosure and Barring Service Check

This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.

Certificate of Sponsorship

Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab).

From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab).

Employer details

Employer name

UK Health Security Agency

Address

Colindale

London

NW9 5EQ


Employer's website

https://www.gov.uk/government/organisations/uk-health-security-agency (Opens in a new tab)

Employer details

Employer name

UK Health Security Agency

Address

Colindale

London

NW9 5EQ


Employer's website

https://www.gov.uk/government/organisations/uk-health-security-agency (Opens in a new tab)

Employer contact details

For questions about the job, contact:

lead recruiter

sophie rigney

sophie.rigney@reed.com

Details

Date posted

07 August 2023

Pay scheme

Other

Salary

£56,770 to £58,769 a year PER ANNUM

Contract

Permanent

Working pattern

Full-time, Part-time, Job share, Flexible working, Home or remote working

Reference number

UKHSA00180

Job locations

Colindale

London

NW9 5EQ


Supporting documents

Privacy notice

UK Health Security Agency's privacy notice (opens in a new tab)