architect - active directory.

A well established organisation is seeking an Active Directory Architect to join a global IT services consultancy, supporting a critical, high-assurance UK secure account. You will work closely with internal technical leads and program stakeholders, you will take ownership of the design, security posture, and strategic evolution of enterprise-scale, on-premises Microsoft Active Directory environments. This role blends high-level architectural strategy with hands-on technical SME capability., * Architectural Leadership: Lead the evolution and design of complex, multi-domain and multi-forest AD architectures.

• Design & Documentation: Author high-quality architectural deliverables, including High-Level Designs (HLDs), Low-Level Designs (LLDs), and operational runbooks.
• Identity Security: Define and enforce Tiered Administration models, Group Policy (GPO) strategies, Privileged Access Workstations (PAWs), and PAM integrations.
• Federation & Core Infrastructure: Support identity integration using ADFS, while optimizing core directory dependencies (DNS, DHCP).
• Remediation & Health Checks: Perform health assessments, security audits, and root-cause analysis for complex identity services.

• Prior experience working in Active Directory Architecture / SME role
• Hands on experience with HLD/LLD Design
• Good understanding of Group Policy
• Extensive experience with Identity Security
• Solid understanding of PowerShell Automation