Senior Active Directory Security Engineer - Entra/AD Hybrid

TechNET IT Recruitment Ltd; Gloucester; Hybrid; GBP 111,000 - 166,000; Full time

Job summary

TechNET IT Recruitment Ltd is seeking three Senior Active Directory Security Engineers/Consultants for initial 6-month contracts, with hybrid attendance and ASAP start. You will lead hands-on AD security hardening, design Tier 0 security models, and translate assessments into practical remediation plans within a large enterprise environment.

The role focuses on on-premises AD, Windows Server infrastructure, and enterprise security, requiring deep experience in Kerberos/NTLM, Group Policy, and

Qualifications

• Extensive hands-on Active Directory security experience in on-premises environments.
• Strong PowerShell scripting and troubleshooting capabilities.
• Experience delivering AD hardening and privileged access improvements.

Responsibilities

• Lead AD security hardening and remediation across a complex enterprise.
• Design and implement AD tiering models including Tier 0 security and privileged access controls.
• Review security assessments and translate findings into remediation plans.
• Investigate identity security improvements and privileged account protection.
• Assess legacy Windows Server environments and security configurations.
• Produce technical documentation and implementation plans.
• Take ownership of defined workstreams delivering security improvements.

Skills

Active Directory

PowerShell

Security hardening

Kerberos/NTLM

Group Policy

Windows Server

Tools

Windows Server

Job description

TechNET IT Recruitment Ltd is seeking three Senior Active Directory Security Engineers/Consultants for initial 6-month contracts, with hybrid attendance and ASAP start. You will lead hands-on AD security hardening, design Tier 0 security models, and translate assessments into practical remediation plans within a large enterprise environment.

The role focuses on on-premises AD, Windows Server infrastructure, and enterprise security, requiring deep experience in Kerberos/NTLM, Group Policy, and