Active Directory & Identity Engineer

OpticoreIT; Greater London; In loco; GBP 92.000 - 129.000; Tempo pieno

Descrizione del lavoro

Opticore IT, a Network Engineer and Project Management consultancy, seeks an Active Directory & Identity Engineer to own day-to-day AD administration and hybrid integration with Microsoft Entra ID. The role is a 9-month contract (Inside IR35) with on-site work in London two days per week.

You will automate tasks with PowerShell, manage AD DS and Group Policy, and collaborate on privileged access controls alongside Cyber Security and Application Owners. Strong ITIL alignment is required.

Competenze

• Active Directory Administration across OUs, Sites, Trusts and ACLs.
• PowerShell automation for AD tasks, data extraction, bulk changes.
• GPO creation, filtering, troubleshooting; DNS, DHCP, Kerberos and LDAP/LDAPS support.
• Hybrid Identity with Entra ID, Entra Connect/Cloud Sync, and SSO.
• ITIL incident, request, problem, and change management.

Mansioni

• Administer on-premises AD DS and hybrid connectivity with Entra ID.
• Apply directory updates: user/computer moves, group changes, access provisioning.
• Troubleshoot incidents, problems and changes per ITIL and governance standards.
• Develop/test PowerShell scripts to automate tasks and JML workflows.
• Manage Group Policy Objects, DNS, DHCP, Sites and Services, Trusts.
• Resolve Kerberos/NTLM authentication, permissions and account lockouts.
• Maintain domain controller health, backups, replication, patching.
• Collaborate with Cyber Security and Application Owners on privileged access controls.
• Drive automation and maintain SOPs and operational docs.

Conoscenze

Active Directory Administration

PowerShell Automation

Group Policy & AD Core Services

Hybrid Identity (Entra ID)

ITIL Service Management

Strumenti

PowerShell

LDAP/LDAPS

Descrizione del lavoro

Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced, challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more.

Opticore IT are currently searching for an Active Directory & Identity Engineer to own the day to day administration, operational health and continuous improvement of cores identity services, primarily on-premises Active Directory and its hybrid integration with Microsoft Entra ID, within Group Technology's Project Team.

This position will be on an initial 9 month contract (Inside IR35) with two days per week required on-site in London.

What you'll be doing:

• Administer and maintain on-premises Microsoft Active Directory Domain Services (AD DS) and its hybrid connectivity with Microsoft Entra ID.
• Action directory object updates, including user and computer moves across OUs, security and distribution group changes, access provisioning and membership audits.
• Troubleshoot and resolve incidents, problems and changes in line with ITIL service management frameworks and ITV governance standards.
• Develop, test and maintain PowerShell scripts to automate administrative tasks, bulk modifications, reporting and Joiners, Movers, Leavers (JML) workflows.
• Manage and troubleshoot Group Policy Objects, DNS, DHCP, Sites and Services, and Domain/Forest Trusts.
• Resolve complex identity issues covering Kerberos/NTLM authentication, authorisation, access permissions and account lockouts.
• Ensure routine maintenance, patching, backups, domain controller health monitoring and directory replication are actively maintained.
• Collaborate with Cyber Security, Workplace Technology and Application Owners to implement privileged access controls, including CyberArk PAM integration, and enforce directory hardening.
• Drive process improvement through automation and maintain comprehensive operational documentation and SOPs.

What you'll bring:

• Active Directory Administration & Architecture - Strong hands-on AD DS experience across OUs, Sites, Trusts and Schema. Confident managing group changes, nested groups and ACLs in a large estate.
• PowerShell Automation for AD - Advanced scripting for AD administration, data extraction, bulk changes and remediation
• Group Policy & AD Core Services - GPO creation, filtering and troubleshooting, plus support of DNS, DHCP, Kerberos and LDAP/LDAPS.
• Hybrid Identity (Microsoft Entra ID) - Solid understanding of Entra ID, hybrid synchronisation via Entra Connect or Cloud Sync, and SSO.
• ITIL Service Management - Works within Incident, Request, Problem and Change processes, with strong analytical and troubleshooting ability.

Diversity:

At Opticore IT we embrace diversity and are committed to equal opportunities. We actively recruit for an inclusive and diverse workforce and as such, want to ensure we do everything we can to support your application.

We want you to feel empowered to let us know if you require any adjustments to be made with your application or interview process so please speak to our recruitment team.