About this role
Salary: £? - ? per year
Requirements: Extensive hands-on Microsoft Active Directory experience.Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.Experience designing and implementing enterprise Active Directory environments.Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.Ability to perform structured gap analysis and provide clear technical recommendations.Strong communication skills with technical and non-technical stakeholders.Experience with Active Roles, PAM/PIM, or identity governance tools.Knowledge of Microsoft Entra ID and on-premises AD synchronisation.Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.Ability to produce implementation-ready designs, runbooks, and remediation plans.Understanding of the business and application impact of Active Directory changes. Responsibilities: Review Active Directory tiering policies and implementation progress.Finalise outstanding tiering activities and validate business and application ownership.Assess cross-tier dependencies, risks, and security alignment.Review and remediate service accounts and scheduled tasks.Implement changes to Active Directory objects, groups, and user configurations.Validate functionality and access following change implementation.Conduct gap analysis between the current environment and target state.Produce technical documentation, remediation plans, and implementation activities. Technologies: Active DirectoryAzureDevOpsJIRAKanbanSecurityCloudSupport More:
We are supporting a large-scale Active Directory transformation programme for our client. This is a hands-on contract role based in London on a hybrid working pattern of 4 days per week onsite, with night shifts depending on the change scheduled. The contract is initially for 6 months, and the rate is £460 per day inside IR35. We are looking for a Senior Active Directory Engineer with strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.
last updated 29 week of 2026