SME - Active Directory

CodeVerse; Farnborough; On-site; GBP 90,000 - 130,000; Full time

Job summary

CodeVerse is seeking an experienced Microsoft Active Directory SME to lead design, implementation, and optimization of enterprise directory services across secure environments. You will work on-premises, engaging with the Tech Lead and stakeholders on customer sites to drive architecture, policy, and tooling decisions.

The role requires deep expertise in multi-domain AD, GPOs, authentication protocols, and PAM implementations, with strong scripting and documentation skills.

Qualifications

• Proven experience as an Active Directory Architect or Senior SME.
• Deep hands-on expertise in multi-domain/forest AD and GPO.
• Experience designing enterprise-scale AD environments.
• Strong knowledge of identity security and PAM.
• Familiarity with Kerberos, NTLM, LDAP, SAML, OAuth.
• PowerShell scripting and automation.
• Experience with SIEM and security tooling.
• Excellent stakeholder communication and documentation.
• Defence/Aerospace sector experience desired.
• Microsoft certifications related to identity and Windows Server.

Responsibilities

• Lead the architecture, design and evolution of on-premises Microsoft Active Directory environments.
• Act as the technical SME, advising on best practices, policies and standards.
• Design and implement secure AD architectures (domains, forests, trusts, replication).
• Develop and enforce Group Policy (GPO) strategies.
• Deliver identity services integration, including ADFS federation.
• Implement tiered administration models, privileged access controls and PAM tooling integration.
• Conduct health checks, security assessments and remediation planning.
• Support incident resolution and root cause analysis for identity and authentication services.
• Produce and maintain design and operational documentation (HLDs, LLDs, runbooks).

Skills

Active Directory

AD Architecture

Group Policy

PowerShell

Identity Security

PAWs and PAM

Authentication Protocols

SIEM Integration

Stakeholder Engagement

Documentation

Multi-domain AD

Education

Microsoft Identity and Access Administrator

Windows Server Certification

Tools

ADFS

SIEM Tools

IDP Integration

Privileged Access Management

Job description

Location: Farnborough / Erskine / Newcastle

About the Role

We are looking for an experienced Microsoft Active Directory SME to lead the design, implementation and optimisation of enterprise directory services within secure, high-assurance environments. You will work both strategically and hands-on, supporting a UK secure account and engaging directly with the Tech Lead, Programme Manager and stakeholders on customer sites.

Key Responsibilities

• Lead the architecture, design and evolution of on-premises Microsoft Active Directory environments
• Act as the technical SME, advising on best practices, policies and standards
• Design and implement secure AD architectures (domains, forests, trusts, replication)
• Develop and enforce Group Policy (GPO) strategies
• Deliver identity services integration, including ADFS federation
• Implement tiered administration models, privileged access controls and PAM tooling integration
• Conduct health checks, security assessments and remediation planning
• Support incident resolution and root cause analysis for identity and authentication services
• Produce and maintain design and operational documentation (HLDs, LLDs, runbooks)

Essential Skills and Experience

• Proven experience as an Active Directory Architect or Senior SME
• Deep hands-on expertise in multi-domain/forest AD, Group Policy, DNS and DHCP
• Experience designing and implementing enterprise-scale AD environments
• Strong knowledge of identity security: tiered administration, least privilege, PAWs and PAM
• Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth)
• PowerShell scripting and automation experience
• Experience integrating AD with security and monitoring tools (e.g. SIEM)
• Excellent stakeholder engagement, communication and documentation skills
• Defence and/or Aerospace sector experience
• Familiarity with JSP series and NCSC guidance
• Microsoft certifications (Identity and Access Administrator, Windows Server)