DV Cleared Microsoft Engineer (2nd Line)

Forfusion Ltd; Cheltenham; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Sick pay insurance

Life insurance

Private medical insurance

Matched pension contribution to 8%

Gym membership

Job summary

Forfusion Ltd is seeking a DV-cleared Microsoft Support Engineer to manage and support Microsoft server, identity, and application services in a managed service environment. You will resolve incidents, monitor platforms, patch systems, and handle service requests within established procedures.

You will act as an escalation point for Service Desk teams, collaborate with senior engineers and vendors, and contribute to maintaining service availability and performance in a secure government/defense

Qualifications

• Must hold DV clearance and be eligible for government/defense environments.
• Experience administering on-premise Windows AD infrastructure including AD FS, AD DS and DRS.
• Proficiency with Windows Server administration and PKI/certificate lifecycle management.

Responsibilities

• Provide day-to-day support, incident resolution and operational management of Microsoft server, identity and application services.
• Monitor, patch, and perform service requests and changes across Microsoft technologies.
• Escalate to senior engineers and collaborate with vendors and customer technical teams to maintain service availability.

Skills

DV clearance

Analytical

Troubleshooting

Independent work

Communication

Tools

Active Directory (AD FS)

Windows Server 2016/2019/2022

AD DS

Device Registration Services (DRS)

Web Application Proxy (WAP)

Load balancers

PKI / Certificate Services

SQL Server

PowerShell

ITIL

SIEM

Job description

We are looking for a DV cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity,and application services within a managed service environment. You will be responsible for incident resolution, monitoring, maintenance, patching, service requests, and operational changes across a range of Microsoft technologies.

Working within established processes and procedures, you will act as an escalation point for Service Desk teams and collaborate with senior engineers, vendors and customer technical teams to maintain service availability and performance.

Key Responsibilities

Service Operations

• Investigate, diagnose andresolve incidents affecting authentication, federation and device registrationservices.
• Support service requests, MACDsand operational change activities.
• Participate in major incidentmanagement and technical escalation activities.
• Maintain operationaldocumentation, support procedures and knowledge articles.
• Ensure adherence to agreedservice levels and operational processes.

Monitoring & Platform Health

• Monitor service availability,health and performance across all solution components.
• Analyse event logs, audit logs,performance counters and telemetry to identify service degradation.
• PProactively identify trends,capacity concerns and potential service risks.
• Support root cause analysis andproblem management activities.
• Maintain monitoring thresholdsand alerting configurations.

Microsoft Identity Services Administration

• Administer Microsoft ActiveDirectory Federation Services (AD FS).
• Manage Device RegistrationServices (DRS) and device identity lifecycle.
• Support OAuth, OpenID Connectand claims-based authentication services.
• Maintain claims issuancepolicies and federation configurations.
• Resolve authentication,certificate and trust relationship issues.
• Support onboarding of newrelying parties and federation integrations.

Security, Patching & Vulnerability Management

• Implement monthly Microsoftsecurity updates and platform maintenance activities.
• Assess vulnerabilities andcoordinate remediation activities.
• Support security hardening inaccordance with Zero Trust principles.
• Manage certificate lifecycleactivities including renewal and replacement.
• Participate in securityreviews, audits and compliance activities.

Change & Release Management

• Prepare technicalimplementation plans and backout procedures.
• Execute approved changes inaccordance with CAB processes.
• Perform testing and validationof platform changes.
• Support release management andservice transition activities.
• Contribute to continual serviceimprovement initiatives.

Service Improvement & Governance

• Participate in monthly andquarterly service reviews.
• Provide technicalrecommendations to improve reliability, resilience and security.
• Produce operational reports andservice metrics.
• Support risk identification andmitigation activities.
• Work collaboratively withcustomer stakeholders, Microsoft SMEs and Forfusion service management teams.

Technical Skills & Experience

Essential

• On-premise Windows ADinfrastructure experience including:
  
  • Microsoft Active DirectoryFederation Services (AD FS).
    
  • Windows Server administration (2016/2019/2022).
    
  • Active Directory DomainServices (AD DS).
    
  • Device Registration Services(DRS).
    
  • Web Application Proxy (WAP).
    
• Load balancers
• Certificate Services, PKI andcertificate lifecycle management.
• SQL Server administration andtroubleshooting.
• Authentication protocolsincluding:
  • SAML
    
  • OAuth 2.0
    
  • OpenID Connect (OIDC)
    
  • Kerberos
    
  • NTLM
    
• PowerShell scripting andautomation.
• Enterprise monitoring and eventlog analysis.
• ITIL-aligned service managementprocesses.
• Incident, Problem and ChangeManagement.

Desirable

• Zero Trust architectureexperience.
• High assurance or governmentenvironments.
• Microsoft Identity and AccessManagement solutions.
• Linux administration.
• Azure AD / Microsoft Entra ID.
• SQL Always-On AvailabilityGroups.
• Security vulnerabilitymanagement.
• SIEM and log managementplatforms.
• Understanding of secure,federated identity architectures.

Personal Attributes

• Strong analytical andtroubleshooting skills.
• Excellent attention to detail.
• Ability to work independentlywithin a secure operational environment.
• Strong written and verbalcommunication skills.
• Customer-focused approach toservice delivery.
• Ability to perform underpressure during major incidents.
• Commitment to continualimprovement and knowledge sharing.

Security & Clearance Requirements

• Applicants must hold current Developed Vetting (DV) clearance.
• Willingness to undergo higherlevels of vetting if required by the Authority.
• Ability to work within securegovernment and defence environments.

Why This Role?

• Work on genuinely critical systems where your contribution matters
  
• Develop deep expertise in Cisco enterprise and security platforms
  
• Be part of a team focused on modern lifecycle delivery, not just reactive support
  
• Operate in a high-trust, high-impact environment
  

Benefits

• Sick pay insurance
  
• Life insurance
  
• Private medical insurance
  
• Matched pension contribution to 8%
  
• Gym membership