> Markdown version of [/jobs/ext/3226332-senior-identity-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/3226332-senior-identity-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Identity Infrastructure Engineer - **Company:** Capgemini - **Location:** Inverness, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Domain Controllers, User Authentication, Cloud Computing, Disaster Recovery, Integrated Windows Authentication, Domain Name System (DNS), Monitoring of Systems, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, User Provisioning Software, Software Vulnerability Management, Okta, System Availability, Enterprise Integration - **Published:** September 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4d62e1e87ec21b4a ## About the Role Active Directory * Extensive hands-on experience administering enterprise Active Directory environments. * Strong knowledge of: * Active Directory Domain Services (AD DS) * Active Directory Sites and Services * Forest and Domain Administration * DNS * Group Policy * LDAP / LDAPS * Kerberos Authentication * Trusts and Replication * AD Backup and Recovery * Experience troubleshooting complex authentication and directory service issues. PKI * Strong experience administering Microsoft Active Directory Certificate Services (AD CS). * Experience managing: * Certificate Authorities * Certificate Templates * CRL and AIA Infrastructure * Certificate Lifecycle Management * Certificate Enrolment Services * Key Recovery and Archival * Experience supporting enterprise PKI environments. Infrastructure Platforms * Windows Server 2016/2019/2022 administration. * PowerShell scripting and automation. * Security hardening and privileged administration. * High Availability and Disaster Recovery planning. * Infrastructure monitoring and operational support. Identity Technologies * Working knowledge of: * Microsoft Entra ID * Microsoft Entra Connect / Cloud Sync * Microsoft Identity Manager (MIM) * Okta * BeyondTrust * Understanding of: * Identity and Access Management (IAM) * Joiner, Mover, Leaver Processes * Identity Lifecycle Management * Authentication and Authorisation * Access Governance * Role-Based Access Control (RBAC) Desirable Skills * Experience supporting Microsoft Identity Manager (MIM). * Experience supporting hybrid identity architectures. * Experience with Okta administration and integration. * Knowledge of BeyondTrust PAM or Endpoint Privilege Management. * Experience with Tier 0 administration and privileged access models. * Familiarity with CrowdStrike, Zscaler, and security platform integrations. * Experience supporting highly regulated or secure environments. * Knowledge of ITIL-based operational support models. * Experience supporting large-scale enterprise identity programmes. We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government's Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who: * Declare they have a disability, and Meet the minimum essential criteria for the role. *, To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. ## Description The successful candidate will be responsible for the administration, support, security, and continuous improvement of the Active Directory, PKI, DNS, Group Policy, and authentication infrastructure. They will work closely with the wider IDAM team, supporting critical identity services and providing L2/L3 operational support across the identity estate where required. This role requires a highly capable infrastructure engineer with deep expertise in Microsoft Active Directory and Public Key Infrastructure (PKI), combined with a strong understanding of enterprise identity technologies and authentication services. The position is based 5 days per week within secure facilities in either Inverness or Manchester, working closely with security, engineering, and IDAM teams to ensure the availability, resilience, and security of critical identity platforms. Your role: Active Directory Infrastructure * Administer and maintain enterprise Active Directory forests, domains, and domain controllers. * Manage Active Directory Sites and Services, replication topology, trusts, and directory services infrastructure. * Administer AD-integrated DNS and support authentication services across the enterprise. * Manage and maintain Group Policy architecture, including policy design, implementation, troubleshooting, and lifecycle management. * Support Active Directory backup, recovery, disaster recovery, and business continuity processes. * Monitor platform health, performance, security, and replication. * Support Active Directory upgrades, migrations, consolidation projects, and infrastructure improvements. * Implement and maintain Active Directory security hardening standards and privileged access controls. Public Key Infrastructure (PKI) * Administer and support Microsoft Active Directory Certificate Services (AD CS). * Manage Certificate Authorities, certificate templates, certificate enrolment, and certificate lifecycle processes. * Support Offline Root CA and Issuing CA infrastructure. * Administer Certificate Revocation Lists (CRL), Authority Information Access (AIA), and certificate distribution services. * Monitor certificate compliance, renewals, revocations, and expiration management. * Maintain PKI operational documentation, recovery procedures, and security standards. * Support cryptographic and certificate-related troubleshooting across infrastructure and security platforms. Identity Infrastructure & Authentication Services * Support Microsoft Entra Connect and hybrid identity infrastructure. * Maintain LDAP, LDAPS, Kerberos, and NTLM authentication services. * Support integrations between Active Directory and enterprise identity platforms including MIM, Entra ID, Okta, and BeyondTrust. * Assist with identity-related service improvements and platform optimisation initiatives. * Support authentication, directory, and identity infrastructure incidents through to resolution. * Work collaboratively with the IDAM engineering team to support critical identity lifecycle services. IDAM Support Activities * Provide L2/L3 support for identity-related incidents and service requests. * Assist with troubleshooting user provisioning, synchronisation, and authentication issues. * Support MIM, Entra ID, Okta, and BeyondTrust integrations where infrastructure expertise is required. * Collaborate with IDAM engineers to investigate root causes and implement long-term solutions. * Support operational activities across the wider identity ecosystem during periods of increased demand. Automation & Continuous Improvement * Develop and maintain PowerShell automation for identity infrastructure administration. * Drive service improvements, platform optimisation, and operational efficiencies. * Contribute to security improvement initiatives, vulnerability remediation, and infrastructure modernisation. * Produce and maintain technical documentation, operational procedures, and support runbooks. You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone. ## Related Videos - [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [Introducing Digital Samba Embedded Video Conferencing API MCP Server](https://www.wearedevelopers.com/videos/1640-introducing-digital-samba-embedded-video-conferencing-api-mcp-server) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Companies to Work For in The UK: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/186-best-companies-to-work-for-in-the-uk-top-25-companies-in-2023) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)