Active Directory Security Consultant - SC Cleared

SR2; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading consulting firm in the United Kingdom is seeking an experienced Active Directory Security Consultant to conduct comprehensive security assessments. This role requires deep expertise in Active Directory and associated security protocols, alongside the capability to provide advisory support. Responsibilities include assessing Azure AD, evaluating privileged access, and ensuring alignment with zero-trust principles. The ideal candidate will have advanced knowledge in multiple areas of identity and access management.

Qualifications

• Advanced knowledge of Active Directory and secure authentication protocols.

Responsibilities

• Conduct end-to-end Active Directory security assessments.
• Lead KRBTGT account analysis and password rotation planning.
• Review Privileged Access structures and group memberships.
• Analyse Kerberos authentication hygiene and ticket anomalies.
• Assess Azure AD and hybrid identity configurations.
• Evaluate service accounts and administrative workstation approaches.

Skills

Advanced knowledge of Active Directory

Group Policy

Kerberos authentication

Entra ID

hybrid identity

secure authentication protocols

Job description

Overview

Active Directory Security Consultant – SC Cleared - Inside IR35 We are seeking an experienced Active Directory Security Consultant to lead a comprehensive security assessment across on-premises AD and Azure identity environments. This role combines deep technical expertise with advisory capability, helping uplift identity and access security posture in line with Microsoft and NCSC best practice.

Responsibilities

• Conduct end-to-end Active Directory security assessments, including domain controllers, trusts, privileged behaviours, deprecated accounts, and protocol risks.
• Lead KRBTGT account analysis and safe password rotation planning.
• Review Privileged Access structures, group memberships and delegated admin models.
• Analyse Kerberos authentication hygiene, ticket anomalies and mitigation options.
• Assess Azure AD / Entra ID and hybrid identity configurations, ensuring alignment to zero-trust principles.
• Evaluate service accounts, Tier-0 assets, GPOs, and administrative workstation approaches (PAW / Cloud PAW).

Essential Skills & Experience

• Advanced knowledge of Active Directory, Group Policy, Kerberos, Entra ID, hybrid identity, and secure authentication protocols.