Senior Active Directory Engineer

Salary: £? - ? per year

Requirements:

• Extensive hands-on Microsoft Active Directory experience.
• Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.
• Experience designing and implementing enterprise Active Directory environments.
• Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.
• Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.
• Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.
• Ability to perform structured gap analysis and provide clear technical recommendations.
• Strong communication skills with technical and non-technical stakeholders.
• Experience with Active Roles, PAM/PIM, or identity governance tools.
• Knowledge of Microsoft Entra ID and on-premises AD synchronisation.
• Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.
• Ability to produce implementation-ready designs, runbooks, and remediation plans.
• Understanding of the business and application impact of Active Directory changes.

Responsibilities:

• Review Active Directory tiering policies and implementation progress.
• Finalise outstanding tiering activities and validate business and application ownership.
• Assess cross-tier dependencies, risks, and security alignment.
• Review and remediate service accounts and scheduled tasks.
• Implement changes to Active Directory objects, groups, and user configurations.
• Validate functionality and access following change implementation.
• Conduct gap analysis between the current environment and target state.
• Produce technical documentation, remediation plans, and implementation activities.

Technologies:

• Active Directory
• Azure
• DevOps
• JIRA
• Kanban
• Security
• Cloud
• Support

More:

We are supporting a large-scale Active Directory transformation programme for our client. This is a hands-on contract role based in London on a hybrid working pattern of 4 days per week onsite, with night shifts depending on the change scheduled. The contract is initially for 6 months, and the rate is £460 per day inside IR35. We are looking for a Senior Active Directory Engineer with strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.

last updated 31 week of 2026