Senior Active Directory Engineer

Curo Resourcing Ltd.; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading Microsoft consultancy is seeking a Senior Active Directory Engineer / Architect to lead AD and Entra ID projects for enterprise customers. You will design, architect, and deliver solutions, ensuring security and compliance, while engaging directly with clients. Ideal candidates have significant experience with large-scale Active Directory, excellent communication skills, and the ability to work autonomously in a remote environment. This role offers full remote flexibility and an opportunity to shape future projects as the business grows.

Qualifications

• Significant experience designing and managing Microsoft Active Directory at enterprise scale.
• Proven track record in multi-forest/domain migrations and greenfield builds.
• Ability to work remotely with minimal supervision and manage multiple projects.

Responsibilities

• Lead assessments, design, and delivery of enterprise Active Directory and Entra ID solutions.
• Deliver a mix of AD-to-AD, AD-to-Entra ID, and cloud-only transformations.
• Engage directly with clients, providing guidance on AD modernisation.

Skills

Consultative mindset

Excellent communication skills

Ability to work independently

Tools

Azure AD

Active Directory

Intune

Sentinel

Defender for Identity

Okta

Job description

Senior Active Directory Engineer / Architect

Salary: £80,000 – £100,000 (depending on experience)

Location: Remote (UK-based with some UK/US timezone overlap)

The Client

Our client is a highly regarded Microsoft consultancy specialising in enterprise‑scale migration, modernisation, and identity security projects. They help global organisations simplify and unify complex IT environments, delivering seamless transitions across Active Directory, Entra ID (Azure AD), Microsoft 365, and hybrid infrastructures. Known for their no‑nonsense approach, they plan and execute every engagement around the client’s business needs, ensuring minimal disruption and maximum value.

The Candidate

You’re an experienced Senior Active Directory Engineer or Architect with deep technical expertise and a consultative mindset. You thrive in projects that balance hands‑on technical delivery with high‑level design and advisory work. You’re confident leading enterprise migrations, securing and modernising complex AD estates, and communicating with clients at both technical and executive levels. Excellent communication skills are essential, along with the ability to work independently in a remote, multi‑project consulting environment.

The Role

This is a senior, client‑facing role that will take ownership of Active Directory and Entra ID projects across enterprise customers. You’ll lead design, architecture, and delivery efforts for AD modernisation, security hardening, and migration engagements, often part of larger M&A or transformation programmes. The position offers full remote flexibility, autonomy, and an opportunity to make a real impact shaping the direction of future projects as the business continues to grow. You’ll work closely with other senior consultants and directors, often leading your own engagements with support from project management. Depending on timing, you may take over an active project or lead a new one from inception.

Responsibilities

• Lead assessments, design, and delivery of enterprise Active Directory and Entra ID solutions.
• Deliver a mix of AD‑to‑AD, AD‑to‑Entra ID, and cloud‑only transformations.
• Architect secure, compliant, and modern identity platforms aligned to Microsoft best practices.
• Create and maintain technical deliverables — design documents, blueprints, migration runbooks, and remediation plans.
• Engage directly with clients, providing expert guidance on AD modernisation and security improvements.
• Operate with autonomy while maintaining clear communication with the wider delivery team and leadership.

Requirements

• Significant experience designing, securing, and managing Microsoft Active Directory at enterprise scale.
• Proven track record in multi‑forest/domain migrations, domain collapses, and greenfield builds.
• Solid understanding of supporting services: DNS/DHCP, Certificate Services, RADIUS/NPS, Group Policy.
• Strong knowledge of AD security models, Microsoft tiering, LAPS, PAWs, and privileged access controls.
• Experience integrating AD with Entra ID (Azure AD) and designing hybrid identity architectures.
• Excellent written and spoken English communication skills.
• Ability to work remotely with minimal supervision, managing multiple projects effectively.
• Familiarity with Entra Connect Sync, Intune, and passwordless authentication (FIDO2, Windows Hello for Business).
• Experience with Okta or other enterprise IdPs (Ping, SailPoint, etc.).
• Hands‑on experience with Sentinel, Defender for Identity, or equivalent identity monitoring tools.
• Knowledge of AD replication, forest decommissioning, and Windows Server 2025.

If you are interested, please submit your CV through our recruitment agency.