> Markdown version of [/jobs/ext/1961272-active-directory-architect-sme](https://www.wearedevelopers.com/jobs/ext/1961272-active-directory-architect-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Active Directory Architect/SME - **Company:** Lucid Support Services Ltd - **Location:** Corsham, UK - **Contract:** Temporary contract - **Skills:** Microsoft Access, Active Directory, Active Directory Federation Services, Authentication Protocols, Cyber Security, Dynamic Host Configuration Protocol, Software Design Patterns, Domain Name System (DNS), High-Level Architecture, Identity and Access Management, Javaserver Pages, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, NT LAN Manager, OAuth, Windows PowerShell, Runbook, Security Assertion Markup Language (SAML), Security Information and Event Management, Togaf - **Published:** August 7, 2026 - **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-E128DDCE81CEFEC0AD/ ## About the Role * Proven experience in an Active Directory Architect or Senior SME role Deep hands-on expertise with: * Microsoft Active Directory (multi-domain/forest environments) * Group Policy design and management * DNS, DHCP, and core supporting infrastructure * Strong experience in designing and implementing enterprise-scale AD environments Demonstrable experience producing high-quality design documentation, including: * High-Level Designs (HLDs) * Low-Level Designs (LLDs) * Security architecture documentation * Operational procedures and runbooks Strong understanding of identity security, including: * Tiered administration models * Least privilege access * Privileged Access Workstations (PAWs) * Privileged access Management Toolset * Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth) * Experience with PowerShell Scripting and automation * Familiarity with integrating AD into enterprise security and monitoring tooling (eg, SIEM) * Excellent stakeholder engagement, communication, and documentation skills Industry Experience: * Experience working within the Defence and/or Aerospace sector is highly desirable * Familiarity with policies, standards, and security frameworks (eg, JSP series, NCSC guidance) * Familiarity with high-security, regulated environments and secure system delivery Desirable Certifications * Microsoft certifications (eg, Identity and Access Administrator, Windows Server) * CISSP, CISM, or equivalent security certifications * TOGAF or other architecture frameworks (desirable) ## Description * We are seeking a highly skilled Microsoft Active Directory Subject Matter Expert (SME) to lead the design, implementation, and optimisation of enterprise directory services within secure, high-assurance environments. * This role requires deep technical expertise in Active Directory architecture, strong delivery experience, and the ability to operate both strategically and hands-on. The successful candidate will support a UK secure account, working closely with stakeholders and delivering solutions on customer sites., * Lead the architecture, design, and evolution of Microsoft Active Directory environments (on premises) * Act as the technical SME for Active Directory, providing expert guidance on best practices, policies, and standards * Design and implement secure AD architectures, including domains, forests, trusts, and replication strategies * Develop and enforce Group Policy (GPO) strategies aligned with security and operational requirements * Deliver identity services integration, including federation (ADFS) * Define and implement tiered administration models, privileged access controls, Integration with Privileged access Management tooling, and secure identity design patterns * Conduct health checks, security assessments, and remediation planning for AD environments * Support incident resolution and root cause analysis relating to identity and authentication services * Produce and maintain comprehensive design and operational documentation * Work closely with security, infrastructure, and application teams to ensure secure and efficient identity services * Engage directly with Tech Lead, Programme Manager and customers on-site, supporting delivery and building trusted relationships ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)