Description Senior Identity and Access Management Engineer (PAM) Essential Criteria Proven experience applying Identity & Access Management (IAM) principles including Authentication, Authorisation, Access control models (RBAC / ABAC / PBAC), identity lifecycle management (Joiners / Movers / Leavers) and Zero Trust. Hands-on experience designing or leading AI driven initiatives within IAM or Cybersecurity. Strong ability to analyse identity telemetry (audit logs, sign in-logs, access data) and translate insights into actionable improvements Extensive hands-on-experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access Packages, MFA and Passwordless authentication (e.g. Windows Hello for Business, FIDO2) Identity governance activities including Access reviews, Entitlement Management and access control models. MS and 3rd party Agentic AI agents governance and lifecycle management. Solid engineering experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect / Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA, MI, SPN, RPA) Working knowledge of how privileges and account types are secured within different operating systems, databases, servers, cloud resources. Experience working with Identity Governance tooling such as Saviynt / SailPoint or any other similar product. Experience with securing access within cloud platforms and technologies (Azure, AWS, GCP). Ability to define AI use cases and requirements aligned to Agent identity governance, Agent lifecycle management, designing controls for effective risk reduction Strong understanding of identity threat landscape and how AI can be applied to detect and mitigate risks Experience in gathering high level technical requirements, discuss with stakeholders to break it down to detailed requirements along with timeline and communicate to the engineers Experience mentoring or coaching engineers, provide technical advice to the team and contributing to team standards and best practices Work with Engineering and Product Manager to deliver technical milestones in line with product and business strategy. Work collaboratively with IT, product teams, Security Operations Centre, Security Analysts, Security Architects and end users to support IAM & PAM solutions and to ensure secure delivery, safeguarding both colleague and customer data. Exhibit excellent communication and presentation skills, able to convey complex issues and findings clearly and effectively. Demonstrates a strong technical mindset with the ability to analyse complex IAM, PAM and AI challenges, make sound architectural and engineering decisions, and proactively remove technical or organisational blockers to enable effective and timely delivery. Maintains a commitment to continuous learning while building strong, trusted relationships with technical teams, security partners and business stakeholders to drive collaboration, capability uplift and shared ownership of outcomes. Additional Criteria Experience using AI and machine learning concepts to analyse identity related data (e.g. -sign in- logs, access patterns, usage trends) Knowledge of AI assisted-automation use cases within IAM: Access or sign in anomaly detection Risk based- access decisions Intelligent access reviews or entitlement recommendations Experience with Microsoft security and analytics tools (e.g. Entra ID logs, Azure Monitor, Log Analytics, Sentinel). Understanding of ethical AI and responsible use of AI, especially in security sensitive and -personal data- contexts. Familiarity with data governance, data quality, and information security principles, particularly where AI models consume identity data. Strong focus on security, governance and continuous improvement Relevant professional certifications (or actively working towards), such as: Microsoft Identity or Security certifications Privileged Access Management certifications AI / data analytics certifications CISSP, CISM, or equivalent Responsibilities We'd all like amazing work to do, and real work-life balance. That's waiting for you at Sainsbury's. Think about the scale it takes for us to feed the nation. The level of data, transactions and variety it involves. Then you'll realise that ours is a modern software engineering environment because it has to be. We've made serious investment into a Tech Academy and into setting standards and principles. We iterate, learn, experiment and push ways of working such as Agile, Scrum and XP. So you can look forward to awesome opportunities in everything from AI to reusable tech. Qualifications We are committed to being a truly inclusive retailer, so you'll be welcomed whoever you are and wherever you work. Around here, there's always the chance to try something new - whether that's as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we'll also offer you an amazing range of benefits. Here are some of them: Starting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury's every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance related bonus of up to 20% of salary, depending on how we perform. Your wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, interest free car loan of up to £10k, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an Employee Assistance Programme, you will also be eligible for private healthcare too. Moments that matter are as important to us as they are to you which is why we give up to 26 weeks' pay for maternity or adoption leave and up to 4 weeks' pay for paternity leave. Please see for a range of our benefits (note, length of service and eligibility criteria may apply).
26/07/2026
Full time
Description Senior Identity and Access Management Engineer (PAM) Essential Criteria Proven experience applying Identity & Access Management (IAM) principles including Authentication, Authorisation, Access control models (RBAC / ABAC / PBAC), identity lifecycle management (Joiners / Movers / Leavers) and Zero Trust. Hands-on experience designing or leading AI driven initiatives within IAM or Cybersecurity. Strong ability to analyse identity telemetry (audit logs, sign in-logs, access data) and translate insights into actionable improvements Extensive hands-on-experience with Microsoft Entra ID (Azure AD), including: Users, Groups (static & dynamic), roles, service principals, app registrations Directories, Tenants, Objects, and Attribute Structures Conditional Access policies, SSO (SAML & OIDC), Access Packages, MFA and Passwordless authentication (e.g. Windows Hello for Business, FIDO2) Identity governance activities including Access reviews, Entitlement Management and access control models. MS and 3rd party Agentic AI agents governance and lifecycle management. Solid engineering experience in Privileged Access Management (PAM) such as CyberArk, StrongDM: User and group management, OU design, Group Policy Objects (GPOs) Hybrid identity integration (Azure AD Connect / Cloud Sync) Password rotation policies Different types of service accounts for on-premises and cloud use cases (SVC, gMSA, MI, SPN, RPA) Working knowledge of how privileges and account types are secured within different operating systems, databases, servers, cloud resources. Experience working with Identity Governance tooling such as Saviynt / SailPoint or any other similar product. Experience with securing access within cloud platforms and technologies (Azure, AWS, GCP). Ability to define AI use cases and requirements aligned to Agent identity governance, Agent lifecycle management, designing controls for effective risk reduction Strong understanding of identity threat landscape and how AI can be applied to detect and mitigate risks Experience in gathering high level technical requirements, discuss with stakeholders to break it down to detailed requirements along with timeline and communicate to the engineers Experience mentoring or coaching engineers, provide technical advice to the team and contributing to team standards and best practices Work with Engineering and Product Manager to deliver technical milestones in line with product and business strategy. Work collaboratively with IT, product teams, Security Operations Centre, Security Analysts, Security Architects and end users to support IAM & PAM solutions and to ensure secure delivery, safeguarding both colleague and customer data. Exhibit excellent communication and presentation skills, able to convey complex issues and findings clearly and effectively. Demonstrates a strong technical mindset with the ability to analyse complex IAM, PAM and AI challenges, make sound architectural and engineering decisions, and proactively remove technical or organisational blockers to enable effective and timely delivery. Maintains a commitment to continuous learning while building strong, trusted relationships with technical teams, security partners and business stakeholders to drive collaboration, capability uplift and shared ownership of outcomes. Additional Criteria Experience using AI and machine learning concepts to analyse identity related data (e.g. -sign in- logs, access patterns, usage trends) Knowledge of AI assisted-automation use cases within IAM: Access or sign in anomaly detection Risk based- access decisions Intelligent access reviews or entitlement recommendations Experience with Microsoft security and analytics tools (e.g. Entra ID logs, Azure Monitor, Log Analytics, Sentinel). Understanding of ethical AI and responsible use of AI, especially in security sensitive and -personal data- contexts. Familiarity with data governance, data quality, and information security principles, particularly where AI models consume identity data. Strong focus on security, governance and continuous improvement Relevant professional certifications (or actively working towards), such as: Microsoft Identity or Security certifications Privileged Access Management certifications AI / data analytics certifications CISSP, CISM, or equivalent Responsibilities We'd all like amazing work to do, and real work-life balance. That's waiting for you at Sainsbury's. Think about the scale it takes for us to feed the nation. The level of data, transactions and variety it involves. Then you'll realise that ours is a modern software engineering environment because it has to be. We've made serious investment into a Tech Academy and into setting standards and principles. We iterate, learn, experiment and push ways of working such as Agile, Scrum and XP. So you can look forward to awesome opportunities in everything from AI to reusable tech. Qualifications We are committed to being a truly inclusive retailer, so you'll be welcomed whoever you are and wherever you work. Around here, there's always the chance to try something new - whether that's as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we'll also offer you an amazing range of benefits. Here are some of them: Starting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury's every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance related bonus of up to 20% of salary, depending on how we perform. Your wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, interest free car loan of up to £10k, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an Employee Assistance Programme, you will also be eligible for private healthcare too. Moments that matter are as important to us as they are to you which is why we give up to 26 weeks' pay for maternity or adoption leave and up to 4 weeks' pay for paternity leave. Please see for a range of our benefits (note, length of service and eligibility criteria may apply).
The Principal Microsoft Defender XDR, IRM & Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations. The Role: Deception Engineering Leadership Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement. Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs. Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise. Microsoft Defender XDR Leadership Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider Risk Management Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements Continuously optimise detection use cases combining identity, data, and behavioural analytics Multi-Cloud Deception & Detection (AWS, GCP, OCI) Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys Control-plane, workload, container, and Kubernetes threat detection Cross-cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft. Stakeholder Engagement & Technical Leadership Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities. Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. What we offer: Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company. We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you. Equal Opportunity Employer We're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants.
21/07/2026
Full time
The Principal Microsoft Defender XDR, IRM & Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations. The Role: Deception Engineering Leadership Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement. Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs. Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise. Microsoft Defender XDR Leadership Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads. Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections. Define and enforce a unified detection and response strategy across the Microsoft security stack. Data Protection, DLP & Insider Risk Management Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements Continuously optimise detection use cases combining identity, data, and behavioural analytics Multi-Cloud Deception & Detection (AWS, GCP, OCI) Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys Control-plane, workload, container, and Kubernetes threat detection Cross-cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft. Stakeholder Engagement & Technical Leadership Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities. Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. What we offer: Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company. We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you. Equal Opportunity Employer We're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants.
(This role is Cardiff based) About Kocho Kocho recognise that technology on its own does not deliver change and offers technology adoption services alongside excellent technical consulting to enable our clients to achieve their business goals on their journey to Become Greater. Our head office is in the heart of London's West End and provides a comfortable working environment with flexible collaboration spaces that encourage our people to Become Greater with the aim to Do What's Right. We now have offices in Cardiff and Cape Town which follow the style of our London space. Kocho is an equal opportunities employer. We make recruitment decisions based on qualifications, skill set and experiences. We consider all suitable candidates regardless of their age, sex, gender reassignment, race, religious beliefs, or lack thereof, marital status, disability or sexual orientation or any other protected characteristic. This mindset aligns with our company values as we understand that we are Better Together. Role Overview The External Identity Support Analyst provides advanced (3rd line) technical support and expertise for external identity platforms and customer identity solutions. The role is essential to ensuring stable, secure, and high performing identity services across our Managed Solution Support portfolio. Key Responsibilities Provide 3rd line remote technical support for customer identity and access solutions within Managed Solution Support, focusing on external identity technologies (Entra ID, Entra External ID, Azure AD B2C, federation, SSO). Maintain and improve the Configuration Management Database (CMDB) for supported services. Support smooth transition of clients and projects into Managed Solution Support. Contribute to the development and enhancement of Kocho's identity service offerings. Operate as a subject matter expert, offering expert advice and solutions to complex or bespoke identity challenges. Influence clients to adopt best practice approaches for secure and scalable identity management. Act as an advocate for clients when working with internal teams and Senior Management. Maintain clear and accurate documentation, troubleshooting guides, and operational procedures. Essential Skills & Experience Strong troubleshooting abilities for complex and bespoke identity-integrated applications. Ability to read and modify code in .NET and C#. Experience with SQL and database management tools. Solid working knowledge of PowerShell for automation and diagnostics. Experience supporting enterprise scale environments. Understanding of federation and identity protocols: SAML 2.0 OAuth 2.0 OpenID Connect Token flows, claims, sessions Experience in operational support roles within business environments. Ability to work effectively in virtual, collaborative, and team-based settings. Excellent communication skills with the ability to explain technical issues clearly to both technical and non technical audiences. Strong analytical and problem solving ability. Demonstrated learning agility and a willingness to adopt new identity technologies. Understanding of security principles including least privilege, secure design, and common vulnerabilities. Familiarity with: Authorization concepts (roles, permissions, app registrations, service principals) User and group lifecycle management (creation, modification, deletion, dynamic groups) Knowledge of Conditional Access (CA) and Multi Factor Authentication (MFA). Additional Beneficial Skills & Experience (Desirable) Experience with operation and support of: Azure AD B2C / Entra External ID Microsoft Entra ID (formerly Azure AD) Azure DevOps Relevant Microsoft certifications such as: SC 300 (Identity & Access Administrator) SC 900 / AZ 900 fundamentals Experience with Customer Identity & Access Management (CIAM) solutions or external identity lifecycle management. Familiarity with API debugging and tooling (e.g., Fiddler, Postman, browser developer tools). Knowledge of identity governance processes (access reviews, entitlement management, automated provisioning). Experience with logging and monitoring tools such as Application Insights, Azure Monitor, Log Analytics. Understanding of Zero Trust architecture and its application to external identity. Experience participating in incident management, including P1/P2 handling, root cause analysis, and post incident reviews.
16/07/2026
Full time
(This role is Cardiff based) About Kocho Kocho recognise that technology on its own does not deliver change and offers technology adoption services alongside excellent technical consulting to enable our clients to achieve their business goals on their journey to Become Greater. Our head office is in the heart of London's West End and provides a comfortable working environment with flexible collaboration spaces that encourage our people to Become Greater with the aim to Do What's Right. We now have offices in Cardiff and Cape Town which follow the style of our London space. Kocho is an equal opportunities employer. We make recruitment decisions based on qualifications, skill set and experiences. We consider all suitable candidates regardless of their age, sex, gender reassignment, race, religious beliefs, or lack thereof, marital status, disability or sexual orientation or any other protected characteristic. This mindset aligns with our company values as we understand that we are Better Together. Role Overview The External Identity Support Analyst provides advanced (3rd line) technical support and expertise for external identity platforms and customer identity solutions. The role is essential to ensuring stable, secure, and high performing identity services across our Managed Solution Support portfolio. Key Responsibilities Provide 3rd line remote technical support for customer identity and access solutions within Managed Solution Support, focusing on external identity technologies (Entra ID, Entra External ID, Azure AD B2C, federation, SSO). Maintain and improve the Configuration Management Database (CMDB) for supported services. Support smooth transition of clients and projects into Managed Solution Support. Contribute to the development and enhancement of Kocho's identity service offerings. Operate as a subject matter expert, offering expert advice and solutions to complex or bespoke identity challenges. Influence clients to adopt best practice approaches for secure and scalable identity management. Act as an advocate for clients when working with internal teams and Senior Management. Maintain clear and accurate documentation, troubleshooting guides, and operational procedures. Essential Skills & Experience Strong troubleshooting abilities for complex and bespoke identity-integrated applications. Ability to read and modify code in .NET and C#. Experience with SQL and database management tools. Solid working knowledge of PowerShell for automation and diagnostics. Experience supporting enterprise scale environments. Understanding of federation and identity protocols: SAML 2.0 OAuth 2.0 OpenID Connect Token flows, claims, sessions Experience in operational support roles within business environments. Ability to work effectively in virtual, collaborative, and team-based settings. Excellent communication skills with the ability to explain technical issues clearly to both technical and non technical audiences. Strong analytical and problem solving ability. Demonstrated learning agility and a willingness to adopt new identity technologies. Understanding of security principles including least privilege, secure design, and common vulnerabilities. Familiarity with: Authorization concepts (roles, permissions, app registrations, service principals) User and group lifecycle management (creation, modification, deletion, dynamic groups) Knowledge of Conditional Access (CA) and Multi Factor Authentication (MFA). Additional Beneficial Skills & Experience (Desirable) Experience with operation and support of: Azure AD B2C / Entra External ID Microsoft Entra ID (formerly Azure AD) Azure DevOps Relevant Microsoft certifications such as: SC 300 (Identity & Access Administrator) SC 900 / AZ 900 fundamentals Experience with Customer Identity & Access Management (CIAM) solutions or external identity lifecycle management. Familiarity with API debugging and tooling (e.g., Fiddler, Postman, browser developer tools). Knowledge of identity governance processes (access reviews, entitlement management, automated provisioning). Experience with logging and monitoring tools such as Application Insights, Azure Monitor, Log Analytics. Understanding of Zero Trust architecture and its application to external identity. Experience participating in incident management, including P1/P2 handling, root cause analysis, and post incident reviews.
Network Engineer - Operations ReliabilityApplylocations: United Kingdomtime type: Full timeposted on: Posted 7 Days Agojob requisition id: JR111070Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.As an Operations Reliability Engineer with a specialization in Network Operations, you will play a supporting role in maintaining the reliability, stability, and performance of enterprise network services while contributing to the broader reliability operations function. You will support incident detection, troubleshooting, and remediation across multiple infrastructure domains, with a focus on LAN/WAN, SD-WAN, wireless, VPN, cloud connectivity, and site connectivity.In addition to your network expertise, you will assist in improving monitoring accuracy, reducing alert noise, and enhancing the quality of operational data used across observability and AIOps platforms. You will participate in automation and AI-readiness efforts by documenting repeated issues, validating automated workflows, and providing operational insights that support engineered fixes and emerging self-healing capabilities.This role blends incident management with event correlation, automated remediation validation, and the application of network-specific knowledge to improve stability and reduce operational noise. You will collaborate across IT to support detection accuracy and contribute to long-term automation, observability, and AI-driven reliability initiatives supporting our global workforce.# Responsibilities: General Reliability Operations Resolve network and infrastructure incidents through hands-on troubleshooting and remediation, escalating complex or non-standard issues when needed to senior analysts or engineering teams. Monitor observability, AIOps, and event management platforms to identify anomalies, performance issues, and emerging incidents using established operational processes and procedures. Perform incident triage and correlation to determine probable cause and appropriate routing for deeper investigation. Validate automated remediation workflows and assist in identifying repeated manual tasks that could be automated. Participate in early-stage automation and AI-readiness activities by documenting remediation steps, key patterns, and operational edge cases to support engineering initiatives. Reduce alert noise by providing recommendations for adjustments to thresholds, suppression logic, or detection rules. Support post-incident reviews by providing relevant data, event timelines, and insights related to network behavior. Collaborate with Cloud, Network, IAM, Messaging, and ServiceNow teams to support incident resolution and improve operational processes. Assist with patching and vulnerability-remediation workflows by troubleshooting failures, validating remediation outcomes and providing manual patching or remediation when automation isn't available. Ensure accuracy of event data, alerts, and service mappings to support strong correlation within monitoring and CMDB systems. Network Focused Responsibilities Troubleshoot and resolve network-related incidents across LAN, WAN, SD-WAN, wireless, VPN, cloud connectivity and branch/site connectivity environments following established standards and escalation procedures. Analyze telemetry and alerts from network monitoring platforms (SolarWinds, SD-WAN controllers, Zscaler, Meraki/Cisco tools) to determine service impact and support issue resolution efforts. Support correlation of network events with dependencies across cloud applications, identity services, endpoints, and SaaS platforms. Participate in validating network automation or configuration workflows, such as failover testing, resilience checks, or config pushes. Assist in identifying network-related automation opportunities by documenting repeated failure modes and manual intervention steps. Support Zscaler configuration troubleshooting, policy validation, and resolution of performance or routing issues. Maintain DEX-based network monitoring dashboards and alerts, ensuring clear signals and detection of user-impacting issues. Provide knowledge-sharing to team members and peers regarding common network troubleshooting patterns. Participate in network readiness activities for office builds, expansions, and infrastructure changes by reviewing operational requirements and monitoring needs. Engage vendors (Cisco TAC) when appropriate and drive issues to resolution Maintain Catalyst 9000 (9300/9400/9500) platforms# Requirements: Bachelor's degree in an IT-related field or equivalent experience. 3+ years in network operations or network engineering roles. Strong understanding of network technologies including routing, switching, wireless, VPN, DNS, DHCP, and basic connectivity principles. Hands-on experience with network monitoring and diagnostic tools such as Cisco Catalyst Center, SolarWinds, Meraki Dashboard, etc. Knowledge of zero trust concepts and principals (Zscaler) Hands-on experience with Cisco IOS-XE Solid understanding of incident management, event correlation, and operational troubleshooting methodologies. Experience collaborating with engineering teams and working within cross-functional operational environments. Ability to interpret network telemetry and logs to identify symptoms, underlying issues, and potential root causes. Strong written and verbal communication skills to explain findings to both technical and non-technical teams. Motivated to develop deeper skills in automation, AIOps, and proactive reliability engineering.# Preferred: Knowledge of SD-WAN support (Cisco) Familiarity with scripting or automation concepts is a plus and supports future career progression. Interest in learning automated remediation patterns, predictive alerting concepts, and modern observability practices. Additional Information Working Hours: This role follows daytime local hours (9:00 AM - 6:00 PM CET) and provides overnight coverage for US teams, aligning to 3 A M - 12:00 PM EST . On-Call Support: Participation in a shared, rotational on-call schedule is required.If a Genesys employee referred you, please use the link they sent you to apply. About Genesys: Genesys empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys CloudTM is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit . Reasonable Accommodations: If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at can expect a response within 24-48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation-such as application follow-ups or resume submissions-may not receive a response. Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.
05/07/2026
Full time
Network Engineer - Operations ReliabilityApplylocations: United Kingdomtime type: Full timeposted on: Posted 7 Days Agojob requisition id: JR111070Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.As an Operations Reliability Engineer with a specialization in Network Operations, you will play a supporting role in maintaining the reliability, stability, and performance of enterprise network services while contributing to the broader reliability operations function. You will support incident detection, troubleshooting, and remediation across multiple infrastructure domains, with a focus on LAN/WAN, SD-WAN, wireless, VPN, cloud connectivity, and site connectivity.In addition to your network expertise, you will assist in improving monitoring accuracy, reducing alert noise, and enhancing the quality of operational data used across observability and AIOps platforms. You will participate in automation and AI-readiness efforts by documenting repeated issues, validating automated workflows, and providing operational insights that support engineered fixes and emerging self-healing capabilities.This role blends incident management with event correlation, automated remediation validation, and the application of network-specific knowledge to improve stability and reduce operational noise. You will collaborate across IT to support detection accuracy and contribute to long-term automation, observability, and AI-driven reliability initiatives supporting our global workforce.# Responsibilities: General Reliability Operations Resolve network and infrastructure incidents through hands-on troubleshooting and remediation, escalating complex or non-standard issues when needed to senior analysts or engineering teams. Monitor observability, AIOps, and event management platforms to identify anomalies, performance issues, and emerging incidents using established operational processes and procedures. Perform incident triage and correlation to determine probable cause and appropriate routing for deeper investigation. Validate automated remediation workflows and assist in identifying repeated manual tasks that could be automated. Participate in early-stage automation and AI-readiness activities by documenting remediation steps, key patterns, and operational edge cases to support engineering initiatives. Reduce alert noise by providing recommendations for adjustments to thresholds, suppression logic, or detection rules. Support post-incident reviews by providing relevant data, event timelines, and insights related to network behavior. Collaborate with Cloud, Network, IAM, Messaging, and ServiceNow teams to support incident resolution and improve operational processes. Assist with patching and vulnerability-remediation workflows by troubleshooting failures, validating remediation outcomes and providing manual patching or remediation when automation isn't available. Ensure accuracy of event data, alerts, and service mappings to support strong correlation within monitoring and CMDB systems. Network Focused Responsibilities Troubleshoot and resolve network-related incidents across LAN, WAN, SD-WAN, wireless, VPN, cloud connectivity and branch/site connectivity environments following established standards and escalation procedures. Analyze telemetry and alerts from network monitoring platforms (SolarWinds, SD-WAN controllers, Zscaler, Meraki/Cisco tools) to determine service impact and support issue resolution efforts. Support correlation of network events with dependencies across cloud applications, identity services, endpoints, and SaaS platforms. Participate in validating network automation or configuration workflows, such as failover testing, resilience checks, or config pushes. Assist in identifying network-related automation opportunities by documenting repeated failure modes and manual intervention steps. Support Zscaler configuration troubleshooting, policy validation, and resolution of performance or routing issues. Maintain DEX-based network monitoring dashboards and alerts, ensuring clear signals and detection of user-impacting issues. Provide knowledge-sharing to team members and peers regarding common network troubleshooting patterns. Participate in network readiness activities for office builds, expansions, and infrastructure changes by reviewing operational requirements and monitoring needs. Engage vendors (Cisco TAC) when appropriate and drive issues to resolution Maintain Catalyst 9000 (9300/9400/9500) platforms# Requirements: Bachelor's degree in an IT-related field or equivalent experience. 3+ years in network operations or network engineering roles. Strong understanding of network technologies including routing, switching, wireless, VPN, DNS, DHCP, and basic connectivity principles. Hands-on experience with network monitoring and diagnostic tools such as Cisco Catalyst Center, SolarWinds, Meraki Dashboard, etc. Knowledge of zero trust concepts and principals (Zscaler) Hands-on experience with Cisco IOS-XE Solid understanding of incident management, event correlation, and operational troubleshooting methodologies. Experience collaborating with engineering teams and working within cross-functional operational environments. Ability to interpret network telemetry and logs to identify symptoms, underlying issues, and potential root causes. Strong written and verbal communication skills to explain findings to both technical and non-technical teams. Motivated to develop deeper skills in automation, AIOps, and proactive reliability engineering.# Preferred: Knowledge of SD-WAN support (Cisco) Familiarity with scripting or automation concepts is a plus and supports future career progression. Interest in learning automated remediation patterns, predictive alerting concepts, and modern observability practices. Additional Information Working Hours: This role follows daytime local hours (9:00 AM - 6:00 PM CET) and provides overnight coverage for US teams, aligning to 3 A M - 12:00 PM EST . On-Call Support: Participation in a shared, rotational on-call schedule is required.If a Genesys employee referred you, please use the link they sent you to apply. About Genesys: Genesys empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys CloudTM is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit . Reasonable Accommodations: If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at can expect a response within 24-48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation-such as application follow-ups or resume submissions-may not receive a response. Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.
Network Engineer - Operations ReliabilityApplylocations: United Kingdomtime type: Full timeposted on: Posted Yesterdayjob requisition id: JR111070Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.As an Operations Reliability Engineer with a specialization in Network Operations, you will play a supporting role in maintaining the reliability, stability, and performance of enterprise network services while contributing to the broader reliability operations function. You will support incident detection, troubleshooting, and remediation across multiple infrastructure domains, with a focus on LAN/WAN, SD-WAN, wireless, VPN, cloud connectivity, and site connectivity.In addition to your network expertise, you will assist in improving monitoring accuracy, reducing alert noise, and enhancing the quality of operational data used across observability and AIOps platforms. You will participate in automation and AI-readiness efforts by documenting repeated issues, validating automated workflows, and providing operational insights that support engineered fixes and emerging self-healing capabilities.This role blends incident management with event correlation, automated remediation validation, and the application of network-specific knowledge to improve stability and reduce operational noise. You will collaborate across IT to support detection accuracy and contribute to long-term automation, observability, and AI-driven reliability initiatives supporting our global workforce.# Responsibilities: General Reliability Operations Resolve network and infrastructure incidents through hands-on troubleshooting and remediation, escalating complex or non-standard issues when needed to senior analysts or engineering teams. Monitor observability, AIOps, and event management platforms to identify anomalies, performance issues, and emerging incidents using established operational processes and procedures. Perform incident triage and correlation to determine probable cause and appropriate routing for deeper investigation. Validate automated remediation workflows and assist in identifying repeated manual tasks that could be automated. Participate in early-stage automation and AI-readiness activities by documenting remediation steps, key patterns, and operational edge cases to support engineering initiatives. Reduce alert noise by providing recommendations for adjustments to thresholds, suppression logic, or detection rules. Support post-incident reviews by providing relevant data, event timelines, and insights related to network behavior. Collaborate with Cloud, Network, IAM, Messaging, and ServiceNow teams to support incident resolution and improve operational processes. Assist with patching and vulnerability-remediation workflows by troubleshooting failures, validating remediation outcomes and providing manual patching or remediation when automation isn't available. Ensure accuracy of event data, alerts, and service mappings to support strong correlation within monitoring and CMDB systems. Network Focused Responsibilities Troubleshoot and resolve network-related incidents across LAN, WAN, SD-WAN, wireless, VPN, cloud connectivity and branch/site connectivity environments following established standards and escalation procedures. Analyze telemetry and alerts from network monitoring platforms (SolarWinds, SD-WAN controllers, Zscaler, Meraki/Cisco tools) to determine service impact and support issue resolution efforts. Support correlation of network events with dependencies across cloud applications, identity services, endpoints, and SaaS platforms. Participate in validating network automation or configuration workflows, such as failover testing, resilience checks, or config pushes. Assist in identifying network-related automation opportunities by documenting repeated failure modes and manual intervention steps. Support Zscaler configuration troubleshooting, policy validation, and resolution of performance or routing issues. Maintain DEX-based network monitoring dashboards and alerts, ensuring clear signals and detection of user-impacting issues. Provide knowledge-sharing to team members and peers regarding common network troubleshooting patterns. Participate in network readiness activities for office builds, expansions, and infrastructure changes by reviewing operational requirements and monitoring needs. Engage vendors (Cisco TAC) when appropriate and drive issues to resolution Maintain Catalyst 9000 (9300/9400/9500) platforms# Requirements: Bachelor's degree in an IT-related field or equivalent experience. 3+ years in network operations or network engineering roles. Strong understanding of network technologies including routing, switching, wireless, VPN, DNS, DHCP, and basic connectivity principles. Hands-on experience with network monitoring and diagnostic tools such as Cisco Catalyst Center, SolarWinds, Meraki Dashboard, etc. Knowledge of zero trust concepts and principals (Zscaler) Hands-on experience with Cisco IOS-XE Solid understanding of incident management, event correlation, and operational troubleshooting methodologies. Experience collaborating with engineering teams and working within cross-functional operational environments. Ability to interpret network telemetry and logs to identify symptoms, underlying issues, and potential root causes. Strong written and verbal communication skills to explain findings to both technical and non-technical teams. Motivated to develop deeper skills in automation, AIOps, and proactive reliability engineering.# Preferred: Knowledge of SD-WAN support (Cisco) Familiarity with scripting or automation concepts is a plus and supports future career progression. Interest in learning automated remediation patterns, predictive alerting concepts, and modern observability practices. Additional Information Working Hours: This role follows daytime local hours (9:00 AM - 6:00 PM CET) and provides overnight coverage for US teams, aligning to 3 A M - 12:00 PM EST . On-Call Support: Participation in a shared, rotational on-call schedule is required.
04/07/2026
Full time
Network Engineer - Operations ReliabilityApplylocations: United Kingdomtime type: Full timeposted on: Posted Yesterdayjob requisition id: JR111070Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.As an Operations Reliability Engineer with a specialization in Network Operations, you will play a supporting role in maintaining the reliability, stability, and performance of enterprise network services while contributing to the broader reliability operations function. You will support incident detection, troubleshooting, and remediation across multiple infrastructure domains, with a focus on LAN/WAN, SD-WAN, wireless, VPN, cloud connectivity, and site connectivity.In addition to your network expertise, you will assist in improving monitoring accuracy, reducing alert noise, and enhancing the quality of operational data used across observability and AIOps platforms. You will participate in automation and AI-readiness efforts by documenting repeated issues, validating automated workflows, and providing operational insights that support engineered fixes and emerging self-healing capabilities.This role blends incident management with event correlation, automated remediation validation, and the application of network-specific knowledge to improve stability and reduce operational noise. You will collaborate across IT to support detection accuracy and contribute to long-term automation, observability, and AI-driven reliability initiatives supporting our global workforce.# Responsibilities: General Reliability Operations Resolve network and infrastructure incidents through hands-on troubleshooting and remediation, escalating complex or non-standard issues when needed to senior analysts or engineering teams. Monitor observability, AIOps, and event management platforms to identify anomalies, performance issues, and emerging incidents using established operational processes and procedures. Perform incident triage and correlation to determine probable cause and appropriate routing for deeper investigation. Validate automated remediation workflows and assist in identifying repeated manual tasks that could be automated. Participate in early-stage automation and AI-readiness activities by documenting remediation steps, key patterns, and operational edge cases to support engineering initiatives. Reduce alert noise by providing recommendations for adjustments to thresholds, suppression logic, or detection rules. Support post-incident reviews by providing relevant data, event timelines, and insights related to network behavior. Collaborate with Cloud, Network, IAM, Messaging, and ServiceNow teams to support incident resolution and improve operational processes. Assist with patching and vulnerability-remediation workflows by troubleshooting failures, validating remediation outcomes and providing manual patching or remediation when automation isn't available. Ensure accuracy of event data, alerts, and service mappings to support strong correlation within monitoring and CMDB systems. Network Focused Responsibilities Troubleshoot and resolve network-related incidents across LAN, WAN, SD-WAN, wireless, VPN, cloud connectivity and branch/site connectivity environments following established standards and escalation procedures. Analyze telemetry and alerts from network monitoring platforms (SolarWinds, SD-WAN controllers, Zscaler, Meraki/Cisco tools) to determine service impact and support issue resolution efforts. Support correlation of network events with dependencies across cloud applications, identity services, endpoints, and SaaS platforms. Participate in validating network automation or configuration workflows, such as failover testing, resilience checks, or config pushes. Assist in identifying network-related automation opportunities by documenting repeated failure modes and manual intervention steps. Support Zscaler configuration troubleshooting, policy validation, and resolution of performance or routing issues. Maintain DEX-based network monitoring dashboards and alerts, ensuring clear signals and detection of user-impacting issues. Provide knowledge-sharing to team members and peers regarding common network troubleshooting patterns. Participate in network readiness activities for office builds, expansions, and infrastructure changes by reviewing operational requirements and monitoring needs. Engage vendors (Cisco TAC) when appropriate and drive issues to resolution Maintain Catalyst 9000 (9300/9400/9500) platforms# Requirements: Bachelor's degree in an IT-related field or equivalent experience. 3+ years in network operations or network engineering roles. Strong understanding of network technologies including routing, switching, wireless, VPN, DNS, DHCP, and basic connectivity principles. Hands-on experience with network monitoring and diagnostic tools such as Cisco Catalyst Center, SolarWinds, Meraki Dashboard, etc. Knowledge of zero trust concepts and principals (Zscaler) Hands-on experience with Cisco IOS-XE Solid understanding of incident management, event correlation, and operational troubleshooting methodologies. Experience collaborating with engineering teams and working within cross-functional operational environments. Ability to interpret network telemetry and logs to identify symptoms, underlying issues, and potential root causes. Strong written and verbal communication skills to explain findings to both technical and non-technical teams. Motivated to develop deeper skills in automation, AIOps, and proactive reliability engineering.# Preferred: Knowledge of SD-WAN support (Cisco) Familiarity with scripting or automation concepts is a plus and supports future career progression. Interest in learning automated remediation patterns, predictive alerting concepts, and modern observability practices. Additional Information Working Hours: This role follows daytime local hours (9:00 AM - 6:00 PM CET) and provides overnight coverage for US teams, aligning to 3 A M - 12:00 PM EST . On-Call Support: Participation in a shared, rotational on-call schedule is required.
