DV Cleared Active Directory Architect

We are supporting a major global technology services organisation delivering secure infrastructure services into a high-profile UK Government environment. We are looking for an experienced Microsoft Active Directory Architect with current, fully transferable DV Clearance to join a critical programme.

*Please note, the preference is for the individual to be based in Erskine, however if based closer to Farnborough or Newcastle, the resource would be expected to attend the client site in Corsham twice per week.

This is an excellent opportunity to work within a secure, enterprise-scale environment where you will lead the architecture, design and optimisation of Microsoft Active Directory services across complex on-premises infrastructures.

Key Responsibilities

• Lead the architecture, design and evolution of enterprise Microsoft Active Directory environments.
• Act as the technical SME for Active Directory, providing expert guidance on best practices, governance and security.
• Design secure AD solutions including multi-domain/forest architectures, trusts and replication strategies.
• Develop and implement Group Policy (GPO) strategies aligned with operational and security requirements.
• Deliver identity integration services including ADFS and authentication services.
• Design privileged access models, tiered administration and secure identity solutions.
• Conduct Active Directory health checks, security assessments and remediation activities.
• Support incident investigations and root cause analysis relating to authentication and identity services.
• Produce High Level Designs (HLDs), Low Level Designs (LLDs), operational documentation and technical runbooks.
• Work closely with programme leadership, infrastructure, security and customer stakeholders within a secure delivery environment.

• Current, fully transferable DV Clearance (essential).
• Proven experience as an Active Directory Architect or Senior Active Directory SME.
• Deep expertise with Microsoft Active Directory in complex multi-domain and multi-forest environments.
• Strong experience with Group Policy, DNS, DHCP and supporting Microsoft infrastructure.
• Experience designing enterprise-scale Active Directory solutions.
• Strong knowledge of identity security including:
• Tiered Administration
• Least Privilege
• Privileged Access Workstations (PAWs)
• Privileged Access Management (PAM)
• Knowledge of Kerberos, NTLM, LDAP, SAML and OAuth.
• PowerShell Scripting and automation experience.
• Experience integrating Active Directory with enterprise monitoring and SIEM platforms.
• Excellent stakeholder engagement, documentation and communication skills.