Active Directory Engineer

Reading, Berkshire
ERSG Ltd

Active Directory Engineer

Remote – some ad hoc travel

Inside IR35

Key Accountabilities

• Define and document a strategic design to for the Active Directory OU structure, focusing on Cloud modernisation, business segmentation and definition of business centric processes and policies for asset management.
• Review existing Group Policy, providing recommendations to harden and adjust existing controls to address best practices, known or emerging vulnerabilities.
• Support short term health and hygiene deliverables to reduce Operational risk across the Active Directory domains and address critical platform obsolescence.
• Support strategic vision to modernise Identity and Access Management, delivering enhancement controls and greater governance for Privileged Access Management.

AD Scope:

• Serve as the subject matter expert for all aspects of Active Directory, including design, implementation, and maintenance. Knowledge of both on-premises AD and Azure AD is essential.
• Proactively lead end-to-end execution of technical activities related to an Active Directory infrastructure project.
• Collaborate in a multi-vendor environment with cross-functional teams to achieve project goals, outcomes, and deliverables.
• Engage with senior stakeholders as a conduit between the business and the project to troubleshoot, prioritise and resolve complex Active Directory issues.
• Drive technical innovation and excellence within the Active Directory environment.
• Identify and implement solutions to enhance the performance and reliability of the Active Directory environment.
• Evaluate and recommend tools and technologies to enhance efficiency, security and effectiveness (e.g. Bloodhound)
• Ensure the Active Directory environment meets security and compliance standards, guiding the implementation and enforcement of security policies and procedures.
• Advise on the creation of comprehensive Active Directory documentation, including run books, standard operating procedures, and guides.
• Document Active Directory configurations, changes, and procedures.

Privileged Access Management Scope:

• Knowledge of privileged access management (PAM) sufficient to facilitate and monitor the success of PAM requirements, projects, and vendor selection.
• Working knowledge of PAM tooling an advantage (CyberArk, Okta).
• Shape the requirements for a PAM solution, ensuring different business units are represented in any requirements documentation.

ersg are an equal opportunities employer; we are committed to promoting equality of opportunity for all job applicants. We do not discriminate against applicants on the basis of age, sex, race, disability, pregnancy, marital status, sexual orientation, gender reassignment or religious background; all decisions are based on merit.