DV Cleared Microsoft Engineer (2nd Line)

Forfusion Ltd; Greater London; Presencial; GBP 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Sick pay insurance

Life insurance

Private medical insurance

Matched pension contribution to 8%

Gym membership

Descripción de la vacante

Forfusion Ltd is seeking a DV-cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity and application services within a managed service environment.

You will handle incident resolution, monitoring, maintenance, patching, service requests and operational changes, acting as escalation point for Service Desk teams and collaborating with senior engineers, vendors and customer technical teams to maintain service availability.

Formación

• DV clearance is required for this role.
• Experience solving authentication, federation and device registration incidents.
• Hands-on management of AD FS, DRS and identity services.
• Ability to implement security patches and platform hardening.

Responsabilidades

• Investigate, diagnose and resolve incidents affecting authentication, federation and device registration services.
• Support service requests and operational change activities.
• Participate in major incident management and escalation activities.
• Maintain operational documentation, procedures and knowledge articles.
• Ensure SLAs and processes are followed.
• Monitor availability and performance; analyze logs and metrics.
• Administer AD FS, DRS and device lifecycle; support OAuth/OIDC.
• Apply monthly security updates and vulnerability remediation.
• Prepare implementation plans and backout procedures.
• Execute changes per CAB; test and validate changes.
• Produce service metrics and operational reports.

Conocimientos

DV clearance

Incident resolution

Collaboration

Escalation point

Security best practices

Herramientas

Active Directory

AD FS

WAP

DRS

SQL Server

OAuth/OpenID

Descripción del empleo

We are looking for a DV cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity,and application services within a managed service environment. You will be responsible for incident resolution, monitoring, maintenance, patching, service requests, and operational changes across a range of Microsoft technologies.

Working within established processes and procedures, you will act as an escalation point for Service Desk teams and collaborate with senior engineers, vendors and customer technical teams to maintain service availability and performance.

Requirements

Key Responsibilities

Service Operations

• Investigate, diagnose andresolve incidents affecting authentication, federation and device registrationservices.
  
• Support service requests, MACDsand operational change activities.
  
• Participate in major incidentmanagement and technical escalation activities.
  
• Maintain operationaldocumentation, support procedures and knowledge articles.
  
• Ensure adherence to agreedservice levels and operational processes.
  

Monitoring & Platform Health

• Monitor service availability,health and performance across all solution components.
  
• Analyse event logs, audit logs,performance counters and telemetry to identify service degradation.
  
• Proactively identify trends,capacity concerns and potential service risks.
  
• Support root cause analysis andproblem management activities.
  
• Maintain monitoring thresholdsand alerting configurations.
  

Microsoft Identity Services Administration

• Administer Microsoft ActiveDirectory Federation Services (AD FS).
  
• Manage Device RegistrationServices (DRS) and device identity lifecycle.
  
• Support OAuth, OpenID Connectand claims-based authentication services.
  
• Maintain claims issuancepolicies and federation configurations.
  
• Resolve authentication,certificate and trust relationship issues.
  
• Support onboarding of newrelying parties and federation integrations.
  

Security, Patching & Vulnerability Management

• Implement monthly Microsoftsecurity updates and platform maintenance activities.
  
• Assess vulnerabilities andcoordinate remediation activities.
  
• Support security hardening inaccordance with Zero Trust principles.
  
• Manage certificate lifecycleactivities including renewal and replacement.
  
• Participate in securityreviews, audits and compliance activities.
  

Change & Release Management

• Prepare technicalimplementation plans and backout procedures.
  
• Execute approved changes inaccordance with CAB processes.
  
• Perform testing and validationof platform changes.
  
• Support release management andservice transition activities.
  
• Contribute to continual serviceimprovement initiatives.
  

Service Improvement & Governance

• Participate in monthly andquarterly service reviews.
  
• Provide technicalrecommendations to improve reliability, resilience and security.
  
• Produce operational reports andservice metrics.
  
• Support risk identification andmitigation activities.
  
• Work collaboratively withcustomer stakeholders, Microsoft SMEs and Forfusion service management teams.
  

Technical Skills & Experience

Essential

• On-premise Windows ADinfrastructure experience including:
  
• Microsoft Active DirectoryFederation Services (AD FS).
  
• Windows Server administration (2016/2019/2022).
  
• Active Directory DomainServices (AD DS).
  
• Device Registration Services(DRS).
  
• Web Application Proxy (WAP).
  
• Load balancers.
  
• Certificate Services, PKI andcertificate lifecycle management.
  
• SQL Server administration andtroubleshooting.
  
• Authentication protocolsincluding:
  
• SAML
  
• OAuth 2.0
  
• OpenID Connect (OIDC)
  
• Kerberos
  
• NTLM
  

• PowerShell scripting andautomation.
  
• Enterprise monitoring and eventlog analysis.
  
• ITIL-aligned service managementprocesses.
  
• Incident, Problem and ChangeManagement.
  

Desirable

• Zero Trust architectureexperience.
  
• High assurance or governmentenvironments.
  
• Microsoft Identity and AccessManagement solutions.
  
• Linux administration.
  
• Azure AD / Microsoft Entra ID.
  
• SQL Always-On AvailabilityGroups.
  
• Security vulnerabilitymanagement.
  
• SIEM and log managementplatforms.
  
• Understanding of secure,federated identity architectures.
  

Personal Attributes

• Strong analytical andtroubleshooting skills.
  
• Excellent attention to detail.
  
• Ability to work independentlywithin a secure operational environment.
  
• Strong written and verbalcommunication skills.
  
• Customer-focused approach toservice delivery.
  
• Ability to perform underpressure during major incidents.
  
• Commitment to continualimprovement and knowledge sharing.
  

Security & Clearance Requirements

• Applicants must hold current Developed Vetting (DV) clearance.
  
• Willingness to undergo higherlevels of vetting if required by the Authority.
  
• Ability to work within securegovernment and defence environments.
  

Benefits

Why This Role?

• Work on genuinely critical systems where your contribution matters
  
• Develop deep expertise in Cisco enterprise and security platforms
  
• Be part of a team focused on modern lifecycle delivery, not just reactive support
  
• Operate in a high-trust, high-impact environment
  

Benefits

• Sick pay insurance
  
• Life insurance
  
• Private medical insurance
  
• Matched pension contribution to 8%
  
• Gym membership