Active Directory Specialist

Amtex Systems Inc; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading IT consultancy is seeking a Technical AD / Entra Consultant based in London. The role requires mainly onsite work, focusing on Active Directory architecture review, compliance assessments, and remediation planning. Candidates should have experience with Active Directory and a strong understanding of compliance standards. This position offers an exciting opportunity to work closely with clients during a critical phase of project development.

Qualifications

• Experience in Active Directory architecture and design.
• Knowledge of compliance standards and processes.
• Ability to evaluate system configurations against industry best practices.

Responsibilities

• Conduct interviews to clarify processes and analysis questions.
• Engage in utilities execution for data gathering.
• Provide comprehensive reports covering investigation findings.

Job description

Technical AD / Entra Consultant - London, UK (Onsite)

Need someone mainly onsite in London (inside IR35)

Role is in the Westminster London area

Here is the required work. We are in between Phase 1 and 2. We are still gathering information.

Scope of Services

Phase 0 - Project Initiation

During the Project Initiation Phase, the Supplier will work with QRT to develop the project framework, including the initial project plans and methods of working.

QRT will also enable the Supplier’s delivery team by providing QRT accounts, allowing the Supplier’s team to progress activities under this SOW.

Supplier and QRT will conduct a workshop to define the project approach and confirm the scope of work.

• During the Project Kick-off, all parties will:
• Confirm the Scope of Services within this SOW
• Agree on roles and responsibilities
• Agree on the Project Management approach and project timelines
• Agree on the Project Governance approach
• Confirm details for any QRT change freezes or other significant events that may impact the project
• Throughout the project, the Supplier will provide updates by attending weekly status update meetings
• Supplier will work alongside the QRT project team to support the QRT-defined Communications Plan

During this Phase, the Supplier will engage with QRT to execute a series of utilities to gather data for analysis. The Supplier will support QRT, or their nominated 3rd party, with the execution of the utilities and the gathering of the results. The list of utilities to be run are listed in Appendix A.

The Supplier will provide QRT with instructions and support on executing these utilities and agree the method for making the reports available to Supplier resources for analysis.

The Supplier will also conduct a series of interviews with QRT personnel to clarify existing processes and answer analysis questions.

The following activities will be carried out by the Supplier, once the utilities have been executed and the results provided, as part of the Authentication and Active Directory review:

• Review the current Active Directory architecture and design, including
• Review for compliance with existing QRT design standards, policies, and processes
• Evaluation of the current configuration and QRT standards against industry and compliance best practices
• Review the security configuration of Active Directory against current threats
• Evaluate the configuration and health of any Active Directory replication services
• Evaluate the configuration and health of any Domain Name Service (DNS)
• Review of Active Directory authentication and authorization configuration
• Review of the data attributes held within Active Directory for consistency and accuracy
• Perform a review of the following systems for permission allocation, consistency of approach against best practice for the following:
• Active Directory Managed File Share access (NTFS / SMB) NTFS
• Deployed SQL databases
• local server permissions

The Supplier will provide QRT with a comprehensive report covering the findings of the Investigation phase including:

All observations following the execution of the utilities listed in Appendix A, including for:

Active Directory

Active Directory Managed File Share access (NTFS / SMB) NTFS File Share access

SQL Access Controls permissions

Local server permissions

Service Accounts access permissions

Identified vulnerabilities and configuration gaps

Nested Groups and Cyclic Nested Groups

Remote Access controls

Phase 2 – Remediation Planning

During this Phase, the Supplier will undertake an analysis exercise of the data from the Investigation phase and provide an updated report covering recommendations and remediation steps.

The updated report will include:

• Prioritisation for remediation
• Remediation steps and estimated level of effort
• Recommendations for Architectural changes