Identity Infrastructure Engineer

Identity Infrastructure Engineer

Rate: £447 per day (inside IR35)

Location:

Inverness or Manchester
Working arrangement:
Based within secure facilities - 5 days onsite
Contract length:
To confirm
Security clearance: BPSSYour new company

You will be joining an organisation operating within a secure and highly regulated environment, supporting critical Identity and Access Management (IDAM) services. Working closely with security, engineering and IDAM teams, you will help maintain the resilience, availability and security of core identity infrastructure platforms.

Your new role

As a Senior Identity Infrastructure Engineer, you will be responsible for the administration, support, security and continuous improvement of the organisation's identity infrastructure estate. This role focuses on Active Directory, PKI, DNS, Group Policy and authentication services, while also providing L2/L3 operational support across wider identity platforms.

Key responsibilities

Active Directory Infrastructure

Administer and maintain enterprise Active Directory forests, domains and domain controllers.
Manage Active Directory Sites and Services, replication topology, trusts and directory infrastructure.
Maintain AD-integrated DNS and authentication services.
Design, implement and support Group Policy architecture.
Support Active Directory backup, recovery, disaster recovery and business continuity processes.
Monitor platform health, security, performance and replication.
Participate in Active Directory upgrades, migrations and infrastructure improvement programmes.
Implement security hardening standards and privileged access controls.

Public Key Infrastructure (PKI)

Administer Microsoft Active Directory Certificate Services (AD CS).
Manage Certificate Authorities, templates, enrolment processes and certificate lifecycle management.
Support Offline Root CA and Issuing CA environments.
Maintain CRL, AIA and certificate distribution services.
Monitor renewals, revocations, compliance and certificate expiry.
Maintain PKI documentation, recovery procedures and security standards.
Troubleshoot cryptographic and certificate-related issues.

Identity Infrastructure & Authentication Services

Support Microsoft Entra Connect and hybrid identity services.
Maintain LDAP, LDAPS, Kerberos and NTLM authentication platforms.
Support integrations across Active Directory, MIM, Entra , Okta and Beyond Trust.
Resolve authentication, directory and infrastructure incidents.
Contribute to service improvements and platform optimisation initiatives.

Automation & Continuous Improvement

Develop and maintain Power Shell automation for infrastructure administration.
Drive operational efficiency and service improvements.
Support security remediation and infrastructure modernisation initiatives.
Produce and maintain technical documentation, support procedures and runbooks.

Essential skills and experience

Extensive experience administering enterprise Active Directory environments.
Strong knowledge of:
Active Directory Domain Services (AD DS)
Active Directory Sites and Services
Forest and domain administration
DNS
Group Policy
LDAP / LDAPS
Kerberos authentication
Trusts and replication
Active Directory backup and recovery
Experience troubleshooting complex authentication and directory service issues.

PKI

Strong experience with Microsoft Active Directory Certificate Services (AD CS).
Experience managing:
Certificate Authorities
Certificate Templates
CRL and AIA infrastructure
Certificate lifecycle management
Certificate enrolment services
Key recovery and archival
Experience supporting enterprise PKI environments.

Infrastructure Platforms

Windows Server 2016, 2019 and 2022 administration.
Power Shell scripting and automation.
Security hardening and privileged administration.
High availability and disaster…