> Markdown version of [/jobs/ext/2992458-identity-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/2992458-identity-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Infrastructure Engineer - **Company:** Hays plc - **Location:** London, UK - **Experience:** Expert - **Salary:** £116,220.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Domain Controllers, User Authentication, Cloud Computing, Disaster Recovery, Integrated Windows Authentication, Domain Name System (DNS), Monitoring of Systems, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Runbook, Okta, System Availability, Enterprise Integration - **Published:** September 19, 2026 - **Apply:** https://www.jobs.service.gov.uk/jobs/6aac0f86f42b5c6e765d460a/apply ## About the Role * Extensive experience administering enterprise Active Directory environments. * Strong knowledge of: * Active Directory Domain Services (AD DS) * Active Directory Sites and Services * Forest and domain administration * DNS * Group Policy * LDAP / LDAPS * Kerberos authentication * Trusts and replication * Active Directory backup and recovery Experience troubleshooting complex authentication and directory service issues. PKI * Strong experience with Microsoft Active Directory Certificate Services (AD CS). * Experience managing: * Certificate Authorities * Certificate Templates * CRL and AIA infrastructure * Certificate lifecycle management * Certificate enrolment services * Key recovery and archival Experience supporting enterprise PKI environments. Infrastructure Platforms * Windows Server 2016, 2019 and 2022 administration. * PowerShell scripting and automation. * Security hardening and privileged administration. * High availability and disaster recovery planning. * Infrastructure monitoring and operational support. Identity Technologies * Working knowledge of: * Microsoft Entra ID * Microsoft Entra Connect / Cloud Sync * Microsoft Identity Manager (MIM) * Okta * BeyondTrust * Strong understanding of: * Identity and Access Management (IAM) * Identity lifecycle management * Authentication and authorisation * Access governance * Role-Based Access Control (RBAC) * Joiner, Mover, Leaver processes Desirable skills and experience * Experience supporting Microsoft Identity Manager (MIM). * Experience supporting hybrid identity architectures. * Experience with Okta administration and integration. * Knowledge of BeyondTrust PAM or Endpoint Privilege Management. * Experience with Tier 0 administration and privileged access models. * Familiarity with CrowdStrike, Zscaler and security platform integrations. * Experience working within highly regulated or secure environments. * Knowledge of ITIL-based operational support models. * Experience supporting large-scale enterprise identity programmes. What you'll get in return * Opportunity to work on critical enterprise identity and authentication platforms. * Exposure to complex Active Directory, PKI and hybrid identity environments. ## Description You will be joining an organisation operating within a secure and highly regulated environment, supporting critical Identity and Access Management (IDAM) services. Working closely with security, engineering and IDAM teams, you will help maintain the resilience, availability and security of core identity infrastructure platforms. Your new role As a Senior Identity Infrastructure Engineer, you will be responsible for the administration, support, security and continuous improvement of the organisation's identity infrastructure estate. This role focuses on Active Directory, PKI, DNS, Group Policy and authentication services, while also providing L2/L3 operational support across wider identity platforms. Key responsibilities Active Directory Infrastructure * Administer and maintain enterprise Active Directory forests, domains and domain controllers. * Manage Active Directory Sites and Services, replication topology, trusts and directory infrastructure. * Maintain AD-integrated DNS and authentication services. * Design, implement and support Group Policy architecture. * Support Active Directory backup, recovery, disaster recovery and business continuity processes. * Monitor platform health, security, performance and replication. * Participate in Active Directory upgrades, migrations and infrastructure improvement programmes. * Implement security hardening standards and privileged access controls. Public Key Infrastructure (PKI) * Administer Microsoft Active Directory Certificate Services (AD CS). * Manage Certificate Authorities, templates, enrolment processes and certificate lifecycle management. * Support Offline Root CA and Issuing CA environments. * Maintain CRL, AIA and certificate distribution services. * Monitor renewals, revocations, compliance and certificate expiry. * Maintain PKI documentation, recovery procedures and security standards. * Troubleshoot cryptographic and certificate-related issues. Identity Infrastructure & Authentication Services * Support Microsoft Entra Connect and hybrid identity services. * Maintain LDAP, LDAPS, Kerberos and NTLM authentication platforms. * Support integrations across Active Directory, MIM, Entra ID, Okta and BeyondTrust. * Resolve authentication, directory and infrastructure incidents. * Contribute to service improvements and platform optimisation initiatives. Automation & Continuous Improvement * Develop and maintain PowerShell automation for infrastructure administration. * Drive operational efficiency and service improvements. * Support security remediation and infrastructure modernisation initiatives. * Produce and maintain technical documentation, support procedures and runbooks. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)