Active Directory Engineer

Salary: Up to 55,000 (dependent on experience) Location: Bristol, Bolton, or Stevenage (Hybrid) Working Pattern: Dynamic/Hybrid (12 days on-site per week) Security Requirement: British Citizenship; Developed Vetting (DV) Clearance required. ( Can start on SC ) Role Purpose The Active Directory Engineer is responsible for managing, securing, and enhancing directory services within complex, high-security environments. This role involves the provisioning, monitoring, and auditing of multiple AD environments to ensure strict compliance with security policies while maintaining an optimized user experience. Key Responsibilities Environment Management: Administer and secure Active Directory Domain Services (AD DS) across multi-forest, air-gapped, and secure enclave environments. Security & Compliance: Maintain rigorous compliance with security frameworks (e.g., ISO 27001, NIST, Cyber Essentials Plus) and perform regular audits of AD health and access controls. Hybrid Identity: Manage and support Azure AD / Entra ID, ADFS, and hybrid identity solutions under strict regulatory controls. Infrastructure Services: Manage core networking services including DNS, DHCP, Sites and Services, and Replication. Automation: Utilize PowerShell for the automation of routine tasks, reporting, and large-scale auditing. Authentication & Access: Support Identity and Access Management (IAM) services, focusing on Kerberos, LDAP, and NTLM protocols. Secure Authentication: Manage Public Key Infrastructure (PKI) and implement smartcard-based authentication and Privileged Access Management (PAM) principles. Documentation: Produce high-quality technical documentation for both technical engineering teams and non-technical stakeholders. Technical Requirements & Qualifications Expert Knowledge: Comprehensive understanding of Active Directory Domain Services (AD DS) and Group Policy (GPO). Security Focus: Proven experience managing identity in air-gapped or secure enclave environments. Automation Skills: Advanced proficiency in PowerShell for systems administration and reporting. Protocols: Deep understanding of Kerberos, LDAP, and NTLM authentication. Security Tools: Familiarity with PKI, smartcards, and PAM (Privileged Access Management). Benefits Package Bonus: Performance-based annual company bonus (up to 2,500). Base of 55,000 Pension: Competitive scheme with total contributions up to 14%. Flexi-Time: Opportunity for paid overtime and up to 15 additional "Flexi Leave" days per year. Family Friendly: Enhanced parental leave (up to 26 weeks for maternity/adoption) and support for fertility treatments. Site Facilities: Subsidised meals, free parking, and on-site amenities. TPBN1_UKTJ

Created: 2026-01-19