DV Cleared Microsoft Engineer (2nd Line)
Forfusion Ltd
We are looking for a DV cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity,and application services within a managed service environment. You will be responsible for incident resolution, monitoring, maintenance, patching, service requests, and operational changes across a range of Microsoft technologies.
Working within established processes and procedures, you will act as an escalation point for Service Desk teams and collaborate with senior engineers, vendors and customer technical teams to maintain service availability and performance.
Requirements
Key Responsibilities
Service Operations
- Investigate, diagnose andresolve incidents affecting authentication, federation and device registrationservices.
- Support service requests, MACDsand operational change activities.
- Participate in major incidentmanagement and technical escalation activities.
- Maintain operationaldocumentation, support procedures and knowledge articles.
- Ensure adherence to agreedservice levels and operational processes.
Monitoring & Platform Health
- Monitor service availability,health and performance across all solution components.
- Analyse event logs, audit logs,performance counters and telemetry to identify service degradation.
- Proactively identify trends,capacity concerns and potential service risks.
- Support root cause analysis andproblem management activities.
- Maintain monitoring thresholdsand alerting configurations.
Microsoft Identity Services Administration
- Administer Microsoft ActiveDirectory Federation Services (AD FS).
- Manage Device RegistrationServices (DRS) and device identity lifecycle.
- Support OAuth, OpenID Connectand claims-based authentication services.
- Maintain claims issuancepolicies and federation configurations.
- Resolve authentication,certificate and trust relationship issues.
- Support onboarding of newrelying parties and federation integrations.
Security, Patching & Vulnerability Management
- Implement monthly Microsoftsecurity updates and platform maintenance activities.
- Assess vulnerabilities andcoordinate remediation activities.
- Support security hardening inaccordance with Zero Trust principles.
- Manage certificate lifecycleactivities including renewal and replacement.
- Participate in securityreviews, audits and compliance activities.
Change & Release Management
- Prepare technicalimplementation plans and backout procedures.
- Execute approved changes inaccordance with CAB processes.
- Perform testing and validationof platform changes.
- Support release management andservice transition activities.
- Contribute to continual serviceimprovement initiatives.
Service Improvement & Governance
- Participate in monthly andquarterly service reviews.
- Provide technicalrecommendations to improve reliability, resilience and security.
- Produce operational reports andservice metrics.
- Support risk identification andmitigation activities.
- Work collaboratively withcustomer stakeholders, Microsoft SMEs and Forfusion service management teams.
Technical Skills & Experience
Essential
- On-premise Windows ADinfrastructure experience including:
- Microsoft Active DirectoryFederation Services (AD FS).
- Windows Server administration (2016/2019/2022).
- Active Directory DomainServices (AD DS).
- Device Registration Services(DRS).
- Web Application Proxy (WAP).
- Load balancers.
- Certificate Services, PKI andcertificate lifecycle management.
- SQL Server administration andtroubleshooting.
- Authentication protocolsincluding:
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
- Kerberos
- NTLM
- PowerShell scripting andautomation.
- Enterprise monitoring and eventlog analysis.
- ITIL-aligned service managementprocesses.
- Incident, Problem and ChangeManagement.
Desirable
- Zero Trust architectureexperience.
- High assurance or governmentenvironments.
- Microsoft Identity and AccessManagement solutions.
- Linux administration.
- Azure AD / Microsoft Entra ID.
- SQL Always-On AvailabilityGroups.
- Security vulnerabilitymanagement.
- SIEM and log managementplatforms.
- Understanding of secure,federated identity architectures.
Personal Attributes
- Strong analytical andtroubleshooting skills.
- Excellent attention to detail.
- Ability to work independentlywithin a secure operational environment.
- Strong written and verbalcommunication skills.
- Customer-focused approach toservice delivery.
- Ability to perform underpressure during major incidents.
- Commitment to continualimprovement and knowledge sharing.
Security & Clearance Requirements
- Applicants must hold current Developed Vetting (DV) clearance.
- Willingness to undergo higherlevels of vetting if required by the Authority.
- Ability to work within securegovernment and defence environments.
Benefits
Why This Role?
- Work on genuinely critical systems where your contribution matters
- Develop deep expertise in Cisco enterprise and security platforms
- Be part of a team focused on modern lifecycle delivery, not just reactive support
- Operate in a high-trust, high-impact environment
Benefits
- Sick pay insurance
- Life insurance
- Private medical insurance
- Matched pension contribution to 8%
- Gym membership
Reference: WJ-766_22848590