Active Directory Security Lead - Identity & PAM Expert

Queen Square Recruitment; Reading; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

Queen Square Recruitment seeks an experienced identity security specialist to lead Active Directory remediation and governance across large enterprise environments. You will administer AD at Domain Admin and Enterprise Admin levels and drive security improvements for AD CS, authentication, and delegation models.

You will coordinate remediation with infrastructure, security, server, database, and application teams, producing governance reports and executive updates.

Qualifications

• Proven experience administering and securing Active Directory in large enterprises.
• Expertise in AD security remediation, hardening, and privilege reduction.
• Strong understanding of AD CS and certificate-based authentication.
• Knowledge of Kerberos, SPNs, and delegation models.
• Experience reviewing AD permissions, ACLs, and privileged groups.
• Familiarity with IAM and PAM technologies and security principles.
• Experience with Azure AD and hybrid identities.
• Experience with PAM platforms and least-privilege security models.
• Experience producing remediation plans and governance reports.
• Experience with live production environments and change management.

Responsibilities

• Lead AD security remediation activities across complex environments.
• Perform AD administration and governance at Domain Admin and Enterprise Admin levels.
• Identify and remediate identity-related vulnerabilities and misconfigurations.
• Review and secure AD CS, authentication, and delegation models.
• Govern privileged access controls, service accounts, and admin groups.
• Coordinate remediation with infrastructure, security, server, database, and apps teams.
• Plan and govern production changes with risk and change management.
• Produce remediation evidence, governance reports, and executive updates.
• Support identity security initiatives and cyber resilience programs.
• Conduct root-cause investigations and provide remediation recommendations.
• Provide escalation support during out-of-hours periods.

Skills

Active Directory

AD security remediation

Privileged Access Management

Azure AD / Entra ID

Kerberos authentication

AD CS

IAM

PAM platforms (CyberArk, BeyondTrust,D

Education

Microsoft Identity & Access Administrator Associate

Microsoft Security Operations Analyst Associate

CISSP

CISM

Tools

PingCastle

BloodHound

Purple Knight

Job description

Queen Square Recruitment seeks an experienced identity security specialist to lead Active Directory remediation and governance across large enterprise environments. You will administer AD at Domain Admin and Enterprise Admin levels and drive security improvements for AD CS, authentication, and delegation models.

You will coordinate remediation with infrastructure, security, server, database, and application teams, producing governance reports and executive updates.