Active Directory Engineer

We are seeking an experienced Active Directory Engineer to lead a critical upgrade of Domain Controllers to a fully supported Windows Server 2022 platform. This engagement will ensure ongoing platform support, strengthen security posture, and enable key dependent services such as Always-On VPN (AOVPN). Working across a mixed on-premises and virtual environment, you will be responsible for delivering a seamless upgrade with minimal disruption to core identity services. This role is well suited to a hands-on infrastructure specialist who is confident operating in live environments and delivering structured upgrade programmes within tight timelines.

• Proven experience upgrading Active Directory Domain Controllers (Windows Server 2016 2019/2022)
• Strong expertise in Active Directory architecture, including multi-site environments
• Experience working across hybrid infrastructure (on-premises and virtual Servers)
• Solid understanding of AD functional levels, schema management, and replication
• Hands-on experience migrating and validating DNS services
• Experience configuring and validating NPS/RADIUS services
• Knowledge of PKI, including implementing strong certificate mapping (eg KB5014754)
• Ability to deliver phased migration approaches (build, migration, testing, handover)
• Strong troubleshooting and validation skills in live environments
• Ability to minimise service disruption and maintain business continuity

Desirable requirements

• Experience supporting Always-On VPN (AOVPN) environments
• Previous work within highly secure or regulated environments
• Relevant Microsoft certifications (eg Windows Server/Identity and Access)
• Familiarity with structured project delivery methodologies