Senior Active Directory Engineer

Senior Active Directory Engineer

Location: London - Hybrid - 4 days per week onsite

Start Date: ASAP

Contract Rate: £460 per day inside IR35

Working Pattern: Night shift depending on the change scheduled

Duration: 6 months initially

Role Overview

Our client is seeking an experienced Senior Active Directory Engineer to support a large-scale Active Directory transformation programme. This is a hands-on contract role requiring strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.

Key Responsibilities

* Review Active Directory tiering policies and implementation progress.

* Finalise outstanding tiering activities and validate business and application ownership.

* Assess cross-tier dependencies, risks, and security alignment.

* Review and remediate service accounts and scheduled tasks.

* Implement changes to Active Directory objects, groups, and user configurations.

* Validate functionality and access following change implementation.

* Conduct gap analysis between the current environment and target state.

* Produce technical documentation, remediation plans, and implementation activities.

Skills & Experience

Essential

* Extensive hands-on Microsoft Active Directory experience.

* Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.

* Experience designing and implementing enterprise Active Directory environments.

* Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.

* Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.

* Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.

* Ability to perform structured gap analysis and provide clear technical recommendations.

* Strong communication skills with technical and non-technical stakeholders.

Desirable

* Experience with Active Roles, PAM/PIM, or identity governance tools.

* Knowledge of Microsoft Entra ID and on-premises AD synchronisation.

* Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.

* Ability to produce implementation-ready designs, runbooks, and remediation plans.

* Understanding of the business and application impact of Active Directory changes.

If you have the relevant skills and experience, please do apply promptly to be considered
Only candidates based in UK and eligible to work in UK are allowed