Active Directory Architect

MBDA; Bristol; Hybrid; GBP 57,000 - 68,000; Full time

Job summary

A leading defence organisation in the UK is seeking an experienced Active Directory Architect to lead the design and optimisation of directory services. The successful candidate will have expert knowledge of Active Directory Domain Services and related technologies. The role requires strategic oversight of AD architecture in complex environments, ensuring robust, scalable solutions compliant with best practices. The position offers a competitive salary of up to £68,000, along with comprehensive benefits including a company bonus and enhanced parental leave.

Benefits

Company bonus of up to 21% salary

Pension contributions up to 14%

Enhanced parental leave

Subsidised meals and free car parking

Excellent career progression and training

Qualifications

• Expert knowledge of Active Directory Domain Services, Group Policy, DNS, DHCP.
• Deep understanding of Azure AD, ADFS, and identity federation models.
• Strong background in Kerberos, LDAP, NTLM authentication.

Responsibilities

• Lead the design, governance, and improvement of directory services.
• Define and maintain the AD architectural roadmap.
• Oversee complex multi-domain and multi-forest environments.

Skills

Expert knowledge of Active Directory Domain Services

Deep understanding of Azure AD / Entra ID

Strong background in Kerberos, LDAP, and PKI-based authentication

Experience architecting bastion forests

Familiarity with PowerShell, Ansible

Integration knowledge across Microsoft Exchange and VMware

Understanding of Zero Trust architecture

Strong stakeholder management skills

Job description

Bristol

We are seeking a highly skilled Active Directory Architect to lead the design, development and optimisation of directory services. In this strategic role you will shape the future state architecture of complex AD environments, defining standards, best practice and ensuring our infrastructure remains robust, scalable and compliant.

Salary

Up to £68,000 depending on experience

Location

Bristol, Bolton or Stevenage

Dynamic working

1‑2 days per week on‑site due to workload classification and dependant on business need.

Security Clearance

British Citizen

This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS), which are managed by the MBDA Personnel Security Team.

What we can offer you:

• Company bonus: Bonus of up to 21% salary
• Pension: maximum total (employer and employee) contribution of up to 14%
• Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave. Enhancements are available for paternity leave, neonatal leave and fertility testing and treatments.
• Facilities: Fantastic site facilities including subsidised meals, free car parking and much more
• Training and Development: Excellent career progression, training and career development opportunities

The opportunity:

The role will be responsible for the strategic design, governance and continual improvement of MBDA’s directory services. Defining and maintaining the AD architectural roadmap, the role will oversee complex multi‑domain and multi‑forest environments.

• Become part of a unique, well‑respected team of dedicated people that have been recognised within our company for its professionalism, dedication and flexibility.
• Having the opportunity to work both nationally and internationally, broaden your horizons by embracing the rich cultural diversity of our company.
• Be part of an organisation with a values‑led culture that is committed to investing in its workforce with a personal development programme.

What we’re looking for from you:

• Expert knowledge of Active Directory Domain Services, Group Policy, DNS, DHCP, Replication and Trusts.
• Deep understanding of Azure AD / Entra ID, ADFS, Hybrid Join and identity federation models.
• Strong background in Kerberos, LDAP, NTLM, and PKI‑based authentication (smartcards, certificates).
• Experience architecting bastion forests and Just‑In‑Time / Just‑Enough Administration (JIT/JEA).
• Familiarity with PowerShell, Ansible and automation frameworks for provisioning and compliance.
• Integration knowledge across Microsoft Exchange, M365, VMware and enterprise IT ecosystems.
• Understanding of Zero Trust architecture, identity threat detection and SIEM integration.
• Strong stakeholder management, influencing and communication skills.
• Ability to translate complex technical challenges into executive‑level decisions and investment cases.

Our company

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee‑led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more.

We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process.

Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.