Senior Windows Active Directory & Infrastructure Engineer

Planet; United Kingdom; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A global technology provider is seeking a Senior Engineer to manage Active Directory and Windows Infrastructure. The role involves overseeing complex hybrid environments, ensuring security and performance of core identity services. You will manage domain controllers, DNS, DHCP, and PKI, leveraging your 5+ years of experience. This position embraces a hybrid work model, requiring three days a week in the office, promoting a diverse and inclusive workplace.

Qualifications

• 5+ years of experience with complex Active Directory environments.
• Strong familiarity with hybrid identity and PKI.
• Hands-on experience with Azure AD and security practices.

Responsibilities

• Manage doman controllers and ensure AD stability and security.
• Oversee directory sync and Conditional Access policies.
• Patch and maintain Windows servers and enforce security hardening.

Skills

Active Directory management

Windows Infrastructure

DNS / DHCP operations

Hybrid Identity management

PKI and certificate management

PowerShell automation

Security hardening practices

Job description

About Planet

Planet is a global provider of integrated technology and payments solutions for retail and hospitality customers.

We create great experiences for the millions of people who use our payments, software, and tax‑free solutions every minute of every day.

Planet empowers its customers to deliver great customer experiences by combining payments and software in ways that drive greater loyalty, increase revenue and save time.

Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in more than 120 markets.

Role overview:

We’re looking for a Senior Engineer with deep expertise in Active Directory and Windows Infrastructure, capable of managing complex, hybrid environments and ensuring the security, stability, and performance of core identity services.

What you will do

• Active Directory (AD DS): Manage domain controllers, replication, Sites & Services, GPOs, privileged groups, DR and backup validation, and authentication troubleshooting.
• DNS / DHCP: Maintain AD‑integrated DNS, zone configuration, records management, scavenging, DHCP pools, reservations, and issue resolution.
• Hybrid Identity (Azure AD / Entra ID): Oversee directory sync, MFA, Conditional Access, identity protection policies, and app/service principal support.
• PKI / Certificates: Manage AD CS, templates, renewals, CRLs, and certificate lifecycle.
• Infrastructure: Patch and maintain Windows servers, troubleshoot performance, support storage/network settings, and enforce security hardening (CIS, LAPS).
• Other services: NTP, DFSR, KMS, RDS.

Who you are

• 5+ years working with complex AD environments, hybrid identity, PKI, and security hardening.
• Strong experience with AD DS, DNS, DHCP, NTP, DFSR.
• Expertise in PKI, certificate management, and DR planning.
• PowerShell for automation.
• Hands‑on experience with Azure AD / Entra ID hybrid identity.
• Solid security mindset: least privilege, privileged access reviews, stale object cleanup.

Nice to Have

• Experience with Conditional Access, MFA, Defender for Identity, PIM, SIEM integrations.
• Knowledge of compliance frameworks (ISO 27001, NIST, DORA).

Certifications (Plus)

• SC‑300, AZ‑800/801, AZ‑104, Security+ or ITIL Foundation.

Why Planet:

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.

We would love to hear from you – Apply now

At Planet, we embrace a hybrid work model, with three days a week in the office.

Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.