Identity Platform Owner

We'reKingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama andKoctasto life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

We have an opportunity for anDirectoryPlatform Engineering Ownerto join us, toleadthe technical direction and product ownership of Kingfisher's identity platform engineering capability, ensuring core identity services(including Active Directory, Entra ID and PKI/Machine Identity)are secure,resilientand scalable. This rolebalances deep technicalexpertisewith platform ownership, enabling teams to work efficiently while aligning to Zero Trust and cloud-first principles.

We are open to basing the role out of any of our UK office locationsin Southampton,Paddingtonor Yeovil, with an expectation of 12 days a month in the office.If not based out of Southampton, we would expect travel to this site at least once a week, due tothe majority ofthe wider team and stakeholders being based here.

• Shape and deliver the technical roadmap for identity platforms across directory infrastructure, cloud identityengineeringand machine identity services, in collaboration with Identity Design and Architecture.
• Provide senior technical leadership for the identity platform, guiding engineering delivery and supporting architectural direction, including complex escalations.
• Ensure the security, resilience, performance and availability of Active Directory, Microsoft Entra ID and hybrid identity services.
• Govern identity security controls such as Conditional Access, MFA, passwordless authentication and federation in line with agreed standards.
• Lead modernisation initiatives through automation, simplification and the structured decommissioning of legacy services.
• Oversee PKI governance, certificate lifecycle management and machine or workload identity services.
• Drive continuous improvement by using service metrics, operational insight, risk and audit findings to strengthen platform performance and outcomes.

• Stronghands onexperience with Active Directory, Microsoft EntraIDand hybrid identity environments.
• Proven experience designing, implementing and governing Conditional Access, MFA and passwordless authentication, and federation technologies (OIDC/SAML).
• Practical knowledge of PKI, ADCS, certificate lifecycle management and machine or workload identities.
• Deep understanding of identity security controls, including privileged access management and administrative hardening.
• Ability to provide senior technical leadership, influencing both technical and non technicalstakeholders and clearly explaining risk and impact.

How We WorkWe believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

What We OfferAn inclusive environment where your potential is limited only by your imagination. We encouragenew ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisherhere.

Diversity & InclusionOur customers come from allwalks of life- and so do we.We'recommitted to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civili partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.