SME - Active Directory

Farnborough Source: WhatJobs

£90,000–£130,000

Location: Farnborough / Erskine / Newcastle

About the Role

We are looking for an experienced Microsoft Active Directory SME to lead the design, implementation and optimisation of enterprise directory services within secure, high-assurance environments. You will work both strategically and hands-on, supporting a UK secure account and engaging directly with the Tech Lead, Programme Manager and stakeholders on customer sites.

Key Responsibilities

Lead the architecture, design and evolution of on-premises Microsoft Active Directory environments
Act as the technical SME, advising on best practices, policies and standards
Design and implement secure AD architectures (domains, forests, trusts, replication)
Develop and enforce Group Policy (GPO) strategies
Deliver identity services integration, including ADFS federation
Implement tiered administration models, privileged access controls and PAM tooling integration
Conduct health checks, security assessments and remediation planning
Support incident resolution and root cause analysis for identity and authentication services
Produce and maintain design and operational documentation (HLDs, LLDs, runbooks)

Essential Skills and Experience

Proven experience as an Active Directory Architect or Senior SME
Deep hands-on expertise in multi-domain/forest AD, Group Policy, DNS and DHCP
Experience designing and implementing enterprise-scale AD environments
Strong knowledge of identity security: tiered administration, least privilege, PAWs and PAM
Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth)
PowerShell scripting and automation experience
Experience integrating AD with security and monitoring tools (e.g. SIEM)
Excellent stakeholder engagement, communication and documentation skills
Defence and/or Aerospace sector experience
Familiarity with JSP series and NCSC guidance
Microsoft certifications (Identity and Access Administrator, Windows Server)