Active Directory & Entra Security Engineers

TechNET IT Recruitment Ltd; Gloucester; Hybrid; GBP 111,000 - 166,000; Full time

Job summary

TechNET IT Recruitment Ltd is seeking three Senior Active Directory Security Engineers/Consultants for initial 6-month contracts, with hybrid attendance and ASAP start. You will lead hands-on AD security hardening, design Tier 0 security models, and translate assessments into practical remediation plans within a large enterprise environment.

The role focuses on on-premises AD, Windows Server infrastructure, and enterprise security, requiring deep experience in Kerberos/NTLM, Group Policy, and

Qualifications

• Extensive hands-on Active Directory security experience in on-premises environments.
• Strong PowerShell scripting and troubleshooting capabilities.
• Experience delivering AD hardening and privileged access improvements.

Responsibilities

• Lead AD security hardening and remediation across a complex enterprise.
• Design and implement AD tiering models including Tier 0 security and privileged access controls.
• Review security assessments and translate findings into remediation plans.
• Investigate identity security improvements and privileged account protection.
• Assess legacy Windows Server environments and security configurations.
• Produce technical documentation and implementation plans.
• Take ownership of defined workstreams delivering security improvements.

Skills

Active Directory

PowerShell

Security hardening

Kerberos/NTLM

Group Policy

Windows Server

Tools

Windows Server

Job description

United Kingdom - Gloucestershire

Senior Active Directory Security Engineers / Consultants x 3 Contract Positions

Initial 6-Month Contracts | Hybrid / Flexible Onsite Attendance | ASAP Start

We are recruiting three experienced Active Directory Security Engineers / Consultants to support a major international organisation with a programme of Active Directory security hardening, remediation and identity resilience improvements.

This is a hands-on technical delivery role, requiring individuals with extensive experience of traditional on-premises Active Directory environments, Windows Server infrastructure and enterprise security.

We're looking for engineers who have spent years working with complex, business-critical AD environments and understand not only how to implement security improvements, but also the potential operational impact of making changes within established infrastructure.

Key Responsibilities

• Lead hands-on Active Directory security hardening and remediation activities across a complex enterprise environment.
• Design and implement AD administrative tiering models, including Tier 0 security and privileged access controls.
• Review security assessments and technical findings, translating recommendations into practical remediation plans.
• Implement identity security improvements, authentication controls and privileged account protection.
• Assess legacy Windows Server environments, authentication protocols, Group Policy and security configurations.
• Understand and manage the operational dependencies and risks associated with security changes.
• Support Active Directory resilience, recovery planning and cyber recovery readiness.
• Work closely with Infrastructure, Cyber Security and Architecture teams to implement improvements safely.
• Produce technical documentation, implementation plans and operational procedures.
• Take ownership of defined workstreams, delivering measurable security improvements with minimal supervision.
• Extensive hands-on experience administering, engineering and securing on-premises Microsoft Active Directory.
• Proven experience delivering AD hardening, security remediation and privileged access improvements.
• Strong knowledge of Active Directory administrative tiering, Tier 0 security, domain controllers and Group Policy.
• In-depth understanding of Windows Server environments, including legacy infrastructure and associated security dependencies.
• Experience working with authentication protocols, including Kerberos, NTLM and SMB, and understanding the implications of changing or disabling legacy configurations.
• Experience implementing security recommendations within complex, business-critical environments without disrupting operations.
• Strong PowerShell scripting and troubleshooting capabilities.
• Experience working independently within large enterprise environments, taking ownership of technical delivery.
• Good understanding of ITIL, change management, technical documentation and operational handover.

Highly Desirable

• Previous involvement in cyber security incidents, Active Directory recovery or post-incident remediation.
• Experience with AD forest recovery, identity resilience and disaster recovery planning.
• Microsoft Defender for Identity, Entra ID and hybrid identity security experience.
• Experience implementing Privileged Access Workstations (PAW) or similar privileged access security controls.
• Experience working within global, manufacturing, engineering or other operationally complex organisations.

The Opportunity

These are delivery-focused contract positions, rather than business-as-usual support roles.

You’ll be joining an established technical environment, working with internal infrastructure and security specialists to deliver a defined programme of security improvements.

We’re particularly interested in experienced engineers who can assess an existing environment, understand its complexities, identify the safest approach and independently implement the required changes.

Contract Details

• Positions: 3
• Duration: Initial 6 months
• Day Rate: Negotiable
• IR35: Status to be confirmed
• Location: Predominantly remote, with occasional onsite attendance for technical workshops, planning and collaboration
• Start: ASAP

If you have extensive hands-on Active Directory security experience and have delivered complex hardening or remediation programmes, we’d be keen to hear from you.