Active Directory Architect

MBDA S.A.S.; Stevenage; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading aerospace and defense company based in the UK is seeking an experienced Active Directory Architect to lead the design and optimisation of directory services. This role will involve defining standards, managing multi-domain environments, and collaborating with stakeholders to implement identity solutions. Applicants should have expert knowledge in Active Directory and Azure AD, strong stakeholder management skills, and the ability to translate technical challenges into strategic decisions. A dynamic working environment is offered with a requirement for British citizenship and DV clearance.

Benefits

25 days of paid annual leave

Flexible Dynamic Working policies

Defined Contribution retirement savings plan

Free financial webinars and education

Healthworks gym membership

Company bonus up to 21% of salary

Qualifications

• Expert knowledge of Active Directory Domain Services, Group Policy, DNS, DHCP, Replication, and Trusts.
• Deep understanding of Azure AD / Entra ID, ADFS, Hybrid Join, and identity federation models.
• Strong background in Kerberos, LDAP, NTLM, and PKI-based authentication.

Responsibilities

• Lead the design and development of directory services across multiple domains and forests.
• Define standards and best practices for Active Directory solutions.
• Collaborate with stakeholders to translate technical challenges into executive-level decisions.

Skills

Active Directory Domain Services

Azure AD / Entra ID

Kerberos

PowerShell

Stakeholder management

Tools

DNS

DHCP

Ansible

Job description

Job Overview

We are seeking a highly skilled Active Directory Architect to lead the design, development and optimisation of directory services. In this strategic role you will shape the future state architecture of complex AD environments. Defining standards, best practice and ensuring our infrastructure remains robust, scalable and compliant. The role will be responsible for the strategic design, governance and continual improvement of MBDAs directory services, defining and maintaining the AD architectural roadmap, and overseeing complex multi-domain and multi-forest environments.

What We Offer You

• Be part of a unique, well-respected team of dedicated people recognized within our company for professionalism, dedication and flexibility.
• Opportunity to work nationally and internationally, broadening horizons through the rich cultural diversity of our company.
• Participate in a values-led culture committed to investing in workforce with a personal development programme.
• Employees receive 25 days of paid annual leave per calendar year, plus all statutory and public holidays. After 5, 10, and 15 years of service an additional day of annual leave is added at each milestone.
• Option to purchase up to five additional days of holiday through payroll.
• Flexible Dynamic Working policies allowing choice of hours and location.
• Defined Contribution retirement savings plan: 4% employee contributions, 6% employer contributions, up to 2% increase.
• Free financial webinars, financial education website, share incentive plan, mortgage advice, season ticket loan, critical illness benefit, employee assistance programme, voluntary private medical insurance, funded private medical insurance (for Grade C & above), dental insurance, healthcare cash plan, healthcare and leisure benefits.
• Healthworks gym membership on-site, annual gym membership with discounted rates at over 3,600 UK gym chains.
• Club activities such as theatre trips, days out, sporting activities.
• Company bonus up to 21% of salary.
• Pension with up to 14% total contribution.
• Enhanced parental leave available up to 26 weeks for maternity, adoption and shared parental leave, with additional paternity, neonatal leave and fertility treatment enhancements.
• Facilities include subsidised meals, free car parking.
• Training and development opportunities and financial support for further study.
• Discounts & vouchers platform, Costco membership, technology vouchers up to £2,500, charity donation tax relief, MyCar scheme, holiday purchase options.

Qualifications

• Expert knowledge of Active Directory Domain Services, Group Policy, DNS, DHCP, Replication, and Trusts.
• Deep understanding of Azure AD / Entra ID, ADFS, Hybrid Join and identity federation models.
• Strong background in Kerberos, LDAP, NTLM, and PKI-based authentication (smartcards, certificates).
• Experience architecting bastion forests and Just-In-Time / Just-Enough Administration (JIT/JEA).
• Familiarity with PowerShell, Ansible and automation frameworks for provisioning and compliance.
• Integration knowledge across Microsoft Exchange, M365, VMware and enterprise IT ecosystems.
• Understanding of Zero Trust architecture, identity threat detection, and SIEM integration.
• Strong stakeholder management, influencing, and communication skills.
• Ability to translate complex technical challenges into executive-level decisions and investment cases.

Responsibilities

Lead the design, development, and optimisation of directory services across multiple domains and forests. Define standards and best practices, govern ongoing improvement of AD solutions, maintain the architectural roadmap, oversee multi-domain/multi-forest environments, collaborate with stakeholders to translate technical challenges into executive-level decisions, and drive zero trust identity implementation.

Work Environment & Security Clearance

Dynamic working: 1-2 days per week on-site as required. Security clearance: British citizen required; DV clearance required. Participants will undergo HMG Basic Personnel Security Standard checks (BPSS) managed by the MBDA Personnel Security Team.