SME - Active Directory

Location: Farnborough / Erskine / Newcastle

About the Role

We are looking for an experienced Microsoft Active Directory SME to lead the design, implementation and optimisation of enterprise directory services within secure, high-assurance environments. You will work both strategically and hands-on, supporting a UK secure account and engaging directly with the Tech Lead, Programme Manager and stakeholders on customer sites.

Key Responsibilities

• Lead the architecture, design and evolution of on-premises Microsoft Active Directory environments
• Act as the technical SME, advising on best practices, policies and standards
• Design and implement secure AD architectures (domains, forests, trusts, replication)
• Develop and enforce Group Policy (GPO) strategies
• Deliver identity services integration, including ADFS federation
• Implement tiered administration models, privileged access controls and PAM tooling integration
• Conduct health checks, security assessments and remediation planning
• Support incident resolution and root cause analysis for identity and authentication services
• Produce and maintain design and operational documentation (HLDs, LLDs, runbooks)

Essential Skills and Experience

• Proven experience as an Active Directory Architect or Senior SME
• Deep hands-on expertise in multi-domain/forest AD, Group Policy, DNS and DHCP
• Experience designing and implementing enterprise-scale AD environments
• Strong knowledge of identity security: tiered administration, least privilege, PAWs and PAM
• Knowledge of authentication protocols (Kerberos, NTLM, LDAP, SAML, OAuth)
• PowerShell scripting and automation experience
• Experience integrating AD with security and monitoring tools (e.g. SIEM)
• Excellent stakeholder engagement, communication and documentation skills
• Defence and/or Aerospace sector experience
• Familiarity with JSP series and NCSC guidance
• Microsoft certifications (Identity and Access Administrator, Windows Server)