Identity & Infrastructure Engineer; Security-Aware

If you love beauty, you’re in the right place.

As the ultimate curator of over 100 of the most in-demand, highly innovative and boundary-pushing beauty brands, we are the go‑to destination for worldwide beauty discovery.

Together through our neighbourhood stores, online presence and loyalty scheme, Space NK has built a flourishing community in which to discover beauty. The customer is at the heart of everything we do, and we will always endeavour to offer everything they need to help them explore, experiment, and enjoy our brands.

• Job title:
  
  Identity & Infrastructure Engineer
• Reporting to:
  Platform Engineering Principal
• Location:
  
  London/hybrid
• Department:
  Technology

The Identity & Infrastructure Engineer will support, maintain and modernise Space NK’s identity and infrastructure services across a hybrid Microsoft environment.

This hands‑on engineering role is responsible for the administration and continuous improvement of Microsoft Entra , Active Directory, Windows infrastructure, Intune and Azure services. The role will help strengthen identity security, improve operational reliability and support Space NK’s transition towards a cloud-native, Entra
-centric operating model.

Working closely with Security, Cloud, Infrastructure and Application teams, the engineer will implement secure identity controls, resolve technical issues and deliver defined areas of project and transformation work. The role will apply automation, robust governance and secure‑by‑default principles across identity, infrastructure and endpoint management.

The successful candidate will have strong foundations in Microsoft identity and infrastructure technologies, together with the capability and ambition to develop deeper expertise in cloud identity, security, automation and modern endpoint management.

• Administer and support Microsoft Entra  Active Directory Domain Services within the hybrid identity environment.
• Implement, maintain and troubleshoot SSO, MFA, Conditional Access and passwordless authentication.
• Support RBAC, Privileged Identity Management and least‑privilege access controls.
• Support identity lifecycle activities, including joiner, mover and leaver processes and access reviews.
• Administer and troubleshoot Entra Connect, Azure AD Connect and Cloud Sync.
• Support application onboarding to Entra  SAML, OAuth 2.0 and OpenID Connect.
• Investigate authentication, authorisation and account‑related issues across cloud and on‑premises environments.

• Administer and support Active Directory, including users, groups, computers, organisational units, Group Policy and domain services.
• Monitor and troubleshoot domain controllers, replication, DNS, DHCP, authentication and Windows Server infrastructure.
• Support Active Directory Certificate Services and certificate lifecycle activities where required.
• Maintain and troubleshoot Group Policy while supporting the migration of appropriate configurations to modern cloud management.
• Support the secure management of service accounts and non‑human identities.
• Maintain technical documentation, configuration records and operational procedures.

• Support Windows device management through Microsoft Intune.
• Assist with the migration from domain and hybrid joined devices to Microsoft Entra Join.
• Support Windows Autopilot, device provisioning and lifecycle management.
• Implement and maintain Intune configuration profiles, compliance policies and security baselines under agreed standards.
• Assist with the migration of appropriate legacy Group Policy settings to Intune.
• Troubleshoot device enrolment, compliance,…