Active Directory Engineer
Role details
Job location
Tech stack
Job description
We are seeking an experienced Active Directory Engineer to lead a critical upgrade of Domain Controllers to a fully supported Windows Server 2022 platform. This engagement will ensure ongoing platform support, strengthen security posture, and enable key dependent services such as Always-On VPN (AOVPN). Working across a mixed on-premises and virtual environment, you will be responsible for delivering a seamless upgrade with minimal disruption to core identity services. This role is well suited to a hands-on infrastructure specialist who is confident operating in live environments and delivering structured upgrade programmes within tight timelines.
Requirements
- Proven experience upgrading Active Directory Domain Controllers (Windows Server 2016 2019/2022)
- Strong expertise in Active Directory architecture, including multi-site environments
- Experience working across hybrid infrastructure (on-premises and virtual Servers)
- Solid understanding of AD functional levels, schema management, and replication
- Hands-on experience migrating and validating DNS services
- Experience configuring and validating NPS/RADIUS services
- Knowledge of PKI, including implementing strong certificate mapping (eg KB5014754)
- Ability to deliver phased migration approaches (build, migration, testing, handover)
- Strong troubleshooting and validation skills in live environments
- Ability to minimise service disruption and maintain business continuity
Desirable requirements
- Experience supporting Always-On VPN (AOVPN) environments
- Previous work within highly secure or regulated environments
- Relevant Microsoft certifications (eg Windows Server/Identity and Access)
- Familiarity with structured project delivery methodologies