Job Description

Senior Active Directory Engineer

Location: London - Hybrid - 4 days per week onsite

Start Date: ASAP

Contract Rate: £460 per day inside IR35

Working Pattern: Night shift depending on the change scheduled

Duration: 6 months initially

Role Overview

Our client is seeking an experienced Senior Active Directory Engineer to support a large-scale Active Directory transformation programme. This is a hands-on contract role requiring strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.

Key Responsibilities

* Review Active Directory tiering policies and implementation progress.

* Finalise outstanding tiering activities and validate business and application ownership.

* Assess cross-tier dependencies, risks, and security alignment.

* Review and remediate service accounts and scheduled tasks.

* Implement changes to Active Directory objects, groups, and user configurations.

* Validate functionality and access following change implementation.

* Conduct gap analysis between the current environment and target state.

* Produce technical documentation, remediation plans, and implementation activities.

Skills & Experience

Essential

* Extensive hands-on Microsoft Active Directory experience.

* Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.

* Experience designing and implementing enterprise Active Directory environments.

* Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.

* Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.

* Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.

* Ability to perform structured gap analysis and provide clear technical recommendations.

* Strong communication skills with technical and non-technical stakeholders.

Desirable

* Experience with Active Roles, PAM/PIM, or identity governance tools.

* Knowledge of Microsoft Entra ID and on-premises AD synchronisation.

* Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.

* Ability to produce implementation-ready designs, runbooks, and remediation plans.

* Understanding of the business and application impact of Active Directory changes.

If you have the relevant skills and experience, please do apply promptly to be considered