Senior Identity Infrastructure Engineer (AD/PKI) | Hybrid

Capgemini

Urmston

Hybrid

GBP 75,000 - 110,000

Full time

48 hours ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Hybrid working

Job summary

Capgemini is seeking an experienced Senior Identity Infrastructure Engineer to administer and maintain core identity platforms including Active Directory, PKI, DNS, and authentication services. You’ll work with Entra Connect, MIM, Okta and BeyondTrust within secure facilities in the UK to ensure availability, security and resilience of critical identity services.

The role requires hands-on expertise in AD CS, PKI lifecycle, RBAC and hybrid identity, with strong scripting and automation using

Qualifications

Extensive hands-on experience administering enterprise Active Directory environments.
Strong knowledge of AD DS, DNS, Group Policy, and Kerberos authentication.
Experience with PKI including AD CS and certificate lifecycle management.
Experience with hybrid identity tools (Entra ID, Entra Connect, MIM, Okta).
Security hardening and privileged access controls, DR/BC planning.

Responsibilities

Administer and maintain Active Directory forests, domains, and domain controllers.
Manage AD sites, services, replication topology, trusts and DNS integration.
Support PKI infrastructure including CA, templates, CRLs and lifecycle.
Maintain authentication services ( LDAP/LDAPS, Kerberos, NTLM).
Automate tasks with PowerShell and improve operational efficiency.
Collaborate with IDAM teams on integrations with Entra ID, MIM, Okta, BeyondTrust.