Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Lead the technical direction and product ownership of Kingfisher’s identity platform engineering capability, ensuring core identity services are secure, resilient, and scalable. This role balances deep technical expertise with platform ownership, enabling teams to work efficiently while aligning to Zero Trust and cloud-first principles.

Responsibilities

• Shape and deliver the technical roadmap for identity platforms across directory infrastructure, cloud identity engineering, and machine identity services.
• Provide senior technical leadership for the identity platform, guiding engineering delivery and supporting architectural direction.
• Ensure the security, resilience, performance, and availability of Active Directory, Microsoft Entra ID, and hybrid identity services.
• Govern identity security controls such as Conditional Access, MFA, passwordless authentication, and federation.
• Lead modernization initiatives through automation, simplification, and the structured decommissioning of legacy services.
• Oversee PKI governance, certificate lifecycle management, and machine or workload identity services.
• Drive continuous improvement by using service metrics, operational insight, risk, and audit findings to strengthen platform performance.

Requirements

• Strong hands-on experience with Active Directory, Microsoft Entra ID, and hybrid identity environments.
• Proven experience designing, implementing, and governing Conditional Access, MFA, passwordless authentication, and federation technologies (OIDC/SAML).
• Practical knowledge of PKI, ADCS, certificate lifecycle management, and machine or workload identities.
• Deep understanding of identity security controls, including privileged access management and administrative hardening.
• Ability to provide senior technical leadership, influencing both technical and non-technical stakeholders and clearly explaining risk and impact.

Skills

• Active Directory
• Microsoft Entra ID
• Hybrid identity
• Conditional Access
• MFA
• Passwordless authentication
• Federation technologies (OIDC/SAML)
• PKI
• ADCS
• Certificate lifecycle management
• Machine identity
• Workload identity
• Privileged access management
• Administrative hardening
• Zero Trust principles
• Cloud-first principles

Location

• Southampton
• Paddington
• Yeovil

Work Type

• Hybrid
• Office-based (1-2 days/week)

Experience Level

• Senior technical leadership

Benefits

• Competitive benefits package
• Opportunities to stretch and grow career

About the Company

• Kingfisher is a team of over 74,000 passionate people bringing brands like B&Q, Screwfix, Brico Depot, Castorama, and Koctas to life.
• Our purpose is Better Homes. Better Lives. For Everyone.
• We believe a better world starts with better homes and work every day to make that a reality.
• We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self.

Equal Opportunity

• We are committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.