Senior Windows Active Directory & Infrastructure Engineer

Planet; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading technology company is looking for a Senior Engineer with deep expertise in Active Directory and Windows Infrastructure. You will manage complex, hybrid environments ensuring security, stability, and performance of identity services. The ideal candidate has 5+ years of experience, strong skills in AD, DNS, DHCP, and PowerShell. The role offers a hybrid work model with three days in the office, emphasizing a commitment to diversity and equal opportunity.

Qualifications

• 5+ years working with complex Active Directory environments.
• Strong experience with DNS, DHCP, NTP, and DFSR.
• Hands-on experience with Azure AD/Entra ID hybrid identity.

Responsibilities

• Manage domain controllers, replication, and authentication troubleshooting.
• Maintain AD-integrated DNS and DHCP configurations.
• Oversee directory sync and implement identity protection policies.

Skills

Active Directory management

DNS/DHCP

Hybrid Identity management

PKI and certificate management

PowerShell automation

Security mindset

Education

Certifications SC-300, AZ-800/801, AZ-104, Security+ or ITIL Foundation

Job description

About Planet

Planet is a global provider of integrated technology and payments solutions for retail and hospitality customers.

We create great experiences for the millions of people who use our payments, software, and tax‑free solutions every minute of every day.

Planet empowers its customers to deliver great customer experiences by combining payments and software in ways that drive greater loyalty, increase revenue and save time.

Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in more than 120 markets.

Role overview:

We’re looking for a Senior Engineer with deep expertise in Active Directory and Windows Infrastructure, capable of managing complex, hybrid environments and ensuring the security, stability, and performance of core identity services.

What you will do

• Active Directory (AD DS): Manage domain controllers, replication, Sites & Services, GPOs, privileged groups, DR and backup validation, and authentication troubleshooting.
• DNS / DHCP: Maintain AD‑integrated DNS, zone configuration, records management, scavenging, DHCP pools, reservations, and issue resolution.
• Hybrid Identity (Azure AD / Entra ID): Oversee directory sync, MFA, Conditional Access, identity protection policies, and app/service principal support.
• PKI / Certificates: Manage AD CS, templates, renewals, CRLs, and certificate lifecycle.
• Infrastructure: Patch and maintain Windows servers, troubleshoot performance, support storage/network settings, and enforce security hardening (CIS, LAPS).
• Other services: NTP, DFSR, KMS, RDS.

Who you are

• 5+ years working with complex AD environments, hybrid identity, PKI, and security hardening.
• Strong experience with AD DS, DNS, DHCP, NTP, DFSR.
• Expertise in PKI, certificate management, and DR planning.
• PowerShell for automation.
• Hands‑on experience with Azure AD / Entra ID hybrid identity.
• Solid security mindset: least privilege, privileged access reviews, stale object cleanup.

Nice to Have

• Experience with Conditional Access, MFA, Defender for Identity, PIM, SIEM integrations.
• Knowledge of compliance frameworks (ISO 27001, NIST, DORA).

Certifications (Plus)

• SC‑300, AZ‑800/801, AZ‑104, Security+ or ITIL Foundation.

Why Planet:

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.

We would love to hear from you – Apply now

At Planet, we embrace a hybrid work model, with three days a week in the office.

Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.