Senior Active Directory Engineer

Senior Active Directory Engineer

Location: London - Hybrid - 4 days per week onsite

Start Date: ASAP

Contract Rate: 460 per day inside IR35

Working Pattern: Night shift depending on the change scheduled

Duration: 6 months initially

Role Overview

Our client is seeking an experienced Senior Active Directory Engineer to support a large-scale Active Directory transformation programme. This is a hands-on contract role requiring strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.

Key Responsibilities

• Review Active Directory tiering policies and implementation progress.
• Finalise outstanding tiering activities and validate business and application ownership.
• Assess cross-tier dependencies, risks, and security alignment.
• Review and remediate service accounts and scheduled tasks.
• Implement changes to Active Directory objects, groups, and user configurations.
• Validate functionality and access following change implementation.
• Conduct gap analysis between the current environment and target state.
• Produce technical documentation, remediation plans, and implementation activities.

Skills & Experience

Essential

• Extensive hands-on Microsoft Active Directory experience.
• Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.
• Experience designing and implementing enterprise Active Directory environments.
• Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.
• Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.
• Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.
• Ability to perform structured gap analysis and provide clear technical recommendations.
• Strong communication skills with technical and non-technical stakeholders.

Desirable

• Experience with Active Roles, PAM/PIM, or identity governance tools.
• Knowledge of Microsoft Entra ID and on-premises AD synchronisation.
• Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.
• Ability to produce implementation-ready designs, runbooks, and remediation plans.
• Understanding of the business and application impact of Active Directory changes.

If you have the relevant skills and experience, please do apply promptly to be considered.