Active Directory & Identity Engineer

OpticoreIT; Greater London; In loco; GBP 77.000 - 118.000; Tempo pieno

Descrizione del lavoro

Opticore IT in London is seeking an Active Directory & Identity Engineer to own day-to-day AD DS administration and its hybrid integration with Entra ID. This 9-month contract requires two days on-site per week at our London office, with ITIL-aligned governance and a focus on security and automation.

You will develop PowerShell scripts to streamline operations, manage Group Policy, DNS, DHCP, and Trusts, and collaborate with Cyber Security and Application Owners to enforce privileged access

Competenze

• Hands-on AD DS across OUs, Sites, Trusts and Schema.
• Strong scripting for data extraction and bulk changes with PowerShell.
• GPO creation and troubleshooting, DNS/DHCP/Kerberos/LDAP.
• Understanding of Entra ID and hybrid synchronization.
• Experience with ITIL Incident, Problem and Change processes.

Mansioni

• Administer on-premises AD DS and Entra ID hybrid connectivity.
• Update directory objects: moves, group changes, provisioning, audits.
• Troubleshoot incidents, problems and changes per ITIL and ITV standards.
• Develop and maintain PowerShell scripts for automation and JML workflows.
• Manage Group Policy, DNS, DHCP, Sites/Services, and Trusts.
• Resolve Kerberos/NTLM authentication and access issues.
• Ensure domain controllers, backups, replication health maintained.
• Collaborate on privileged access controls including CyberArk PAM.
• Drive automation and maintain SOPs and documentation.

Conoscenze

Active Directory Administration & 

PowerShell Automation for AD

Group Policy & AD Core Services

Hybrid Identity (Microsoft Entra ID)

ITIL Service Management

Strumenti

PowerShell

Descrizione del lavoro

Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced,challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more.

Opticore IT are currently searching for an Active Directory & Identity Engineerto own the day to day administration, operational health and continuous improvement of cores identity services, primarily on-premises Active Directory and its hybrid integration with Microsoft Entra ID, within Group Technology's Project Team.

This position will be on an initial 9 month contract (Inside IR35) with two days per week required on-site in London.

What you'll be doing:

• Administer and maintain on-premises Microsoft Active Directory Domain Services (AD DS) and its hybrid connectivity with Microsoft Entra ID.
• Action directory object updates, including user and computer moves across OUs, security and distribution group changes, access provisioning and membership audits.
• Troubleshoot and resolve incidents, problems and changes in line with ITIL service management frameworks and ITV governance standards.
• Develop, test and maintain PowerShell scripts to automate administrative tasks, bulk modifications, reporting and Joiners, Movers, Leavers (JML) workflows.
• Manage and troubleshoot Group Policy Objects, DNS, DHCP, Sites and Services, and Domain/Forest Trusts.
• Resolve complex identity issues covering Kerberos/NTLM authentication, authorisation, access permissions and account lockouts.
• Ensure routine maintenance, patching, backups, domain controller health monitoring and directory replication are actively maintained.
• Collaborate with Cyber Security, Workplace Technology and Application Owners to implement privileged access controls, including CyberArk PAM integration, and enforce directory hardening.
• Drive process improvement through automation and maintain comprehensive operational documentation and SOPs.

What you'llbring:

• Active Directory Administration & Architecture - Strong hands-on AD DS experience across OUs, Sites, Trusts and Schema. Confident managing group changes, nested groups and ACLs in a large estate.
• PowerShell Automation for AD - Advanced scripting for AD administration, data extraction, bulk changes and remediation
• Group Policy & AD Core Services - GPO creation, filtering and troubleshooting, plus support of DNS, DHCP, Kerberos and LDAP/LDAPS.
• Hybrid Identity (Microsoft Entra ID) - Solid understanding of Entra ID, hybrid synchronisation via Entra Connect or Cloud Sync, and SSO.
• ITIL Service Management - Works within Incident, Request, Problem and Change processes, with strong analytical and troubleshooting ability.

Diversity:

At Opticore IT we embrace diversity and are committed to equal opportunities. We actively recruit for an inclusive and diverse workforce and as such, want to ensure we do everything we can to support your application.

We want you to feel empowered to let us know if you require any adjustments to be made with your application or interview process so please speak to our recruitment team.

#LI-DS1