<h2>About the role</h2><p><strong>Booker | Technology Infrastructure</strong></p><p>At Booker, we’re building secure, reliable technology that helps our colleagues serve customers better every day. We believe great things happen when everyone feels welcome, supported and able to be themselves at work.</p><p>As a Systems Engineer I within the Booker Technology Infrastructure team, you will play a key role in strengthening Booker's cyber security posture through the delivery and support of Identity &amp; Access Management (IAM) controls.</p><p>Working closely with internal technology teams and third-party suppliers, you will be responsible for onboarding applications into Booker's Single Sign-On (SSO) platform, supporting Privileged Access Management (PAMS) onboarding activities, and maintaining evidence required to demonstrate compliance against Tesco's Layered Defence Model (LDM).</p><p>You will help drive improvements in access governance, authentication controls and privileged access processes, ensuring solutions are delivered in a secure, auditable and operationally effective manner.</p><p>The role provides an excellent opportunity to develop expertise in Identity Management, Cyber Security Governance, SSO technologies and Privileged Access Management while contributing to strategic security improvement programmes across Booker.</p><h2>Main Responsibilities</h2><p><strong>Single Sign-On (SSO)</strong></p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Supporting the onboarding of applications into Booker's SSO platform</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Working with suppliers to gather and validate SAML and OIDC configuration requirements</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Assisting with authentication testing and troubleshooting</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Maintaining accurate records of SSO integrations and configuration details</p><p><strong>Privileged Access Management (PAMS)</strong></p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Supporting onboarding of colleagues, third parties and systems into the Privileged Access Management solution</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Assisting with access reviews and governance activities</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Ensuring privileged access is appropriately controlled, documented and auditable</p><p><strong>Layered Defence Model (LDM)</strong></p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Supporting system owners in completing LDM assessments</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Collecting, maintaining and organising evidence required for security assurance activities</p><p>•&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Identifying gaps and driving remediation actions to improve compliance scores</p><p>• &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Maintaining system inventories, infrastructure diagrams and supporting documentation</p><h2>You will need</h2><ul><li>An understanding of Identity &amp; Access Management principles</li><li>Experience working with or supporting Single Sign-On technologies (SAML, OIDC or OAuth)</li><li>An understanding of Privileged Access Management concepts</li><li>Strong organisational skills with the ability to manage multiple onboarding activities simultaneously</li><li>Experience working with suppliers and stakeholders to collect technical requirements</li><li>Good documentation and evidence management skills</li><li>An understanding of cyber security governance, compliance or audit activities</li><li>Strong communication and problem-solving skills</li><li>A proactive and detail-oriented approach to security and continuous improvement</li></ul><h2>What's in it for you</h2><p>At Booker, along with being a great place to work and giving you an opportunity to get on in your career, we also offer the following fantastic package of benefits:</p><ul><li>A Booker colleague card with 10% off purchases at Booker and double discount events up to three times a year.</li><li>After 3 months service, a Tesco colleague discount card with 10% increasing to 15% off most purchases at Tesco for a 4 day period after every four-weekly pay day, ie. thirteen times a year. In addition to 10% off at Tesco Cafe and 20% off all F&amp;F purchases.</li><li>10% off pay monthly &amp; SIM only deals with Tesco Mobile for yourself, along with further great deals through-out the year.</li><li>Up to 30% off car, pet and home insurance at Tesco bank. Terms and conditions apply.</li><li>Free eye test when you spend £50 or more. You can also save 30% when you spend £50 or more on glasses, prescription sunglasses and contact lenses.</li><li>50% off health checks at Tesco Pharmacy.</li><li>Exclusive access to discounted RAC breakdown cover rates</li><li>An exclusive deals and discounts website saving you money on everyday purchases including a cycle to work scheme.</li><li>After 3 months service, you can join our annual Save As You Earn share scheme which allows you to buy Tesco shares in the future at a discount.</li><li>Retirement savings plan (pension) - save up to 5% and Booker will match your contribution.</li><li>Life Assurance - You are covered for death in service life cover of up to three times annual pay</li><li>Health and Wellbeing support and resources including our 24/7, confidential Employee Assistance Programme and Virtual GP for you and your family.</li><li>A great holiday package</li></ul><p class="flex justify-end my-8"><a class="btn flex items-center bg-orange w-full md:w-1/2 md:p-5 text-left text-xl" href="https://applybookercareers.com/members/?j=31444" target="_blank">Apply now <span class="text-4xl font-light grow text-right">&gt;</span></a></p>