> Markdown version of [/jobs/ext/103619-microsoft-active-directory-architect](https://www.wearedevelopers.com/jobs/ext/103619-microsoft-active-directory-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Active Directory Architect - **Company:** Datasource - **Location:** Newcastle upon Tyne, UK - **Experience:** Expert - **Salary:** £80,000.0 - £89,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Ad Management, Authentication Protocols, Cyber Security, Dynamic Host Configuration Protocol, Domain Name System (DNS), Javaserver Pages, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, NT LAN Manager, OAuth, Windows PowerShell, Role-Based Access Control, Security Assertion Markup Language (SAML), Security Information and Event Management, Systems Integration, Togaf - **Published:** May 26, 2026 - **Apply:** https://www.datasourcerecruitment.co.uk/jobs/microsoft-active-directory-architect/ ## About the Role Our client is looking for a Microsoft Active Directory Architect and SME to lead the design, implementation, and securing of enterprise directory services within defence-grade, high-assurance environments. You'll need deep hands-on AD architecture experience and the ability to operate at both strategic and technical levels., · Proven experience in a senior Active Directory Architect or SME role. · Deep hands-on knowledge of multi-domain and multi-forest AD environments. · Strong experience designing and implementing Group Policy, DNS, and DHCP in enterprise environments. · Solid understanding of identity security including tiered admin models, least privilege, PAWs, and PAM tooling. · Knowledge of authentication protocols including Kerberos, NTLM, LDAP, SAML, and OAuth. · Experience with PowerShell scripting and automation for AD management tasks. · Ability to produce high-quality HLDs, LLDs, security architecture docs, and operational runbooks. · Strong stakeholder engagement and communication skills in secure, customer-facing environments. The client would also like to see some of the below, but this is not essential: · Experience working within the Defence and/or Aerospace sector. · Familiarity with MOD policies, JSP series standards, and NCSC security guidance. · Microsoft certifications such as Identity and Access Administrator or Windows Server. · CISSP, CISM, or equivalent security certifications. · TOGAF or equivalent architecture framework qualification. · Experience integrating AD with enterprise SIEM and security monitoring tooling. ## Description · Lead the architecture, design, and evolution of on-premises Microsoft Active Directory environments. · Act as technical SME for AD, providing expert guidance on best practices, policies, and standards. · Design and implement secure AD structures including domains, forests, trusts, and replication strategies. · Develop and enforce Group Policy strategies aligned with security and operational requirements. · Define and implement tiered administration models, privileged access controls, and PAM tooling integration. · Conduct health checks, security assessments, and remediation planning across AD environments. · Produce and maintain comprehensive design documentation including HLDs, LLDs, and operational runbooks. · Engage directly with Tech Leads, Programme Managers, and on-site customers to support delivery. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Introduction to Responsible AI: Balancing Value and Risk](https://www.wearedevelopers.com/videos/1972-introduction-to-responsible-ai-balancing-value-and-risk) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [API Design - Getting Started](https://www.wearedevelopers.com/videos/33-api-design-getting-started) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)