Senior Active Directory Engineer

FinXL; North Sydney Council; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

FinXL Professional Services is seeking a Senior Active Directory Engineer to join our consulting team for a 6 months+ contract with a leading telecommunications client in North Sydney. You will be the hands-on identity anchor ensuring resilience, security, and scalable Windows identity infrastructure.

Responsibilities include designing and deploying AD across multi-domain environments, implementing ASD Essential 8 aligned security, GPO and DNS configurations, and automation via PowerShell.

Qualifications

• Extensive experience designing and managing large Active Directory environments.
• Strong expertise in GPO, ADFS federation, and Windows Server infrastructure.
• Experience with ASD Essential 8 and Zero Trust design principles.

Responsibilities

• Architect, deploy, and refine AD solutions across complex environments.
• Drive identity security hardening programs per ASD Essential 8 and Zero Trust.
• Enhance AD services, DNS configurations, and PKI lifecycle management.

Skills

Active Directory design

Multi-domain / multi-forest

AD security hardening

Group Policy

PowerShell scripting

Zero Trust/ ASD Essential 8

AD-integrated DNS

PKI & certificate infrastructure

Leadership in complex environments

Tools

PowerShell

SCOM

PKI

Job description

Senior Active Directory Engineer

Join our Infrastructure Practice, and support critical on-premises identity initiatives.

FinXL Professional Services is a leading IT consultancy that partners with clients to bridge the gap between business needs and technology capabilities. Since 2003, we've been delivering high-value ICT services across government, finance, telecommunications, and enterprise sectors.

FinXL is seeking a Senior Active Directory Engineer to join our consulting team and be deployed with a leading telecommunications client on a 6 months+ contract in North Sydney.

Advance your consulting career and join the FinXL Infrastructure practice as a Senior Active Directory Engineer with a leading telecommunications client on a 6 months+ contract in North Sydney. You will serve as the hands‑on identity anchor for the team, ensuring the resilience, scalability, and security of critical Windows infrastructure while driving key identity optimization projects. Active Directory, Ekta ID, GPO and Windows infrastructure.

Responsibilities

• Architect, deploy, and refine Active Directory solutions across complex multi-domain and multi-forest environments.
• Drive identity security hardening programs aligned to ASD Essential 8 protocols and Zero Trust concepts.
• Enhance and administer Group Policy Objects, ADFS, and AD-integrated DNS configurations to maximize stability and security.
• Design administrative tiering strategies and privileged access management models to minimize vulnerability risks.
• Resolve intricate multi-site replication, authentication, and directory service performance issues.
• Build automated PowerShell scripts for directory maintenance, user lifecycle automation, and governance reporting.
• Oversee supporting identity services including SCOM health monitoring, Hyper-V systems, and PKI certificate infrastructure.

Key Skills & Experience

• Extensive background designing and managing large-scale Active Directory environments, site topologies, and FSMO roles.
• Advanced expertise in Group Policy management, ADFS federation scenarios, and core Windows Server infrastructure.
• Demonstrated capability in AD security remediation, administrative tiering models, and mitigating identity attack vectors.
• Strong proficiency in PowerShell scripting for large-scale automation, auditing, and health assessment workflows.
• Practical experience applying ASD Essential 8 framework strategies and Zero Trust architectural design principles.
• Sound understanding of supporting components, including AD-integrated DNS, PKI lifecycle, and SCOM monitoring toolsets.
• Superior technical leadership skills with a track record of driving outcomes independently in complex environments.

Engagement Details

• 6 months+ contract with a telecommunications client.
• Hybrid working model with 50% in the office in North Sydney.