Systems Engineer I SSO/LDM/PAMS

Booker | Technology Infrastructure

At Booker, we’re building secure, reliable technology that helps our colleagues serve customers better every day. We believe great things happen when everyone feels welcome, supported and able to be themselves at work.

As a Systems Engineer I within the Booker Technology Infrastructure team, you will play a key role in strengthening Booker's cyber security posture through the delivery and support of Identity & Access Management (IAM) controls.

Working closely with internal technology teams and third-party suppliers, you will be responsible for onboarding applications into Booker's Single Sign-On (SSO) platform, supporting Privileged Access Management (PAMS) onboarding activities, and maintaining evidence required to demonstrate compliance against Tesco's Layered Defence Model (LDM).

You will help drive improvements in access governance, authentication controls and privileged access processes, ensuring solutions are delivered in a secure, auditable and operationally effective manner.

The role provides an excellent opportunity to develop expertise in Identity Management, Cyber Security Governance, SSO technologies and Privileged Access Management while contributing to strategic security improvement programmes across Booker.

Single Sign-On (SSO)

• Supporting the onboarding of applications into Booker's SSO platform

• Working with suppliers to gather and validate SAML and OIDC configuration requirements

• Assisting with authentication testing and troubleshooting

• Maintaining accurate records of SSO integrations and configuration details

Privileged Access Management (PAMS)

• Supporting onboarding of colleagues, third parties and systems into the Privileged Access Management solution

• Assisting with access reviews and governance activities

• Ensuring privileged access is appropriately controlled, documented and auditable

Layered Defence Model (LDM)

• Supporting system owners in completing LDM assessments

• Collecting, maintaining and organising evidence required for security assurance activities

• Identifying gaps and driving remediation actions to improve compliance scores

• Maintaining system inventories, infrastructure diagrams and supporting documentation

• An understanding of Identity & Access Management principles
• Experience working with or supporting Single Sign-On technologies (SAML, OIDC or OAuth)
• An understanding of Privileged Access Management concepts
• Strong organisational skills with the ability to manage multiple onboarding activities simultaneously
• Experience working with suppliers and stakeholders to collect technical requirements
• Good documentation and evidence management skills
• An understanding of cyber security governance, compliance or audit activities
• Strong communication and problem-solving skills
• A proactive and detail-oriented approach to security and continuous improvement

Booker is the UK's leading food & drink wholesaler. We are privileged to serve independent retailers, caterers and small businesses, from locations across the country. We operate over 190 cash and carry branches, 8 distribution centres, 5 Best Food Logistics sites, as well as 6 support centre locations across the UK.

Diversity, Equity and Inclusion (DE&I) at Booker means that whoever you are and whatever your background, we always want you to feel represented and that you can be yourself at work. In short, we’re a place where Everyone’s Welcome.

We know life looks a little different for each of us. That’s why at Booker and Best, we always welcome conversations about flexible working. Some people are at the start of their careers; some want the freedom to do the things they love. Others are going through life-changing moments like becoming a carer, nearing retirement, adapting to parenthood, or something else. So, talk to us throughout your application about how we may be able to support you.

We’re proud that Booker is a Disability Confident Committed Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support you can expect, please contact recruitment@bookergroup.com

Please note

We can only accept candidates over the age of 18 if the role requires working before 6:15 am or after 9:45 pm or involves working in areas such as the warehouse, beers, wines & spirits, and driving roles.

On the occasions where we have high volumes of applicants, some roles may close earlier than the advertised end date in order for us to manage all of the applicants appropriately. We will only be able to offer individual feedback to those candidates who attend an interview.

*Booker Group is part of Tesco plc, however, is operated separately from the core Tesco business and as such the benefits offered will be different from those offered at Tesco*

For more information about us please visit www.bookergroupjobs.co.uk