Senior Identity Infrastructure Engineer

Anticipated Contract End Date/Length: 6 months Work Set Up:
On-site, 5 days per week

Clearance Required:

BPSSOur client in the Information Technology and Services industry is looking for a Senior Identity Infrastructure Engineer to support and maintain the core identity infrastructure platforms underpinning the organisation's Identity and Access Management (IDAM) services. The successful candidate will be responsible for the administration, support, security, and continuous improvement of Active Directory, PKI, DNS, Group Policy, and authentication infrastructure, while providing L2/L3 operational support across the identity estate.

• Administer and maintain enterprise Active Directory forests, domains, and domain controllers.
• Manage Active Directory Sites and Services, replication topology, trusts, and directory services infrastructure.
• Administer AD-integrated DNS and support enterprise authentication services.
• Manage Group Policy architecture, including policy design, implementation, troubleshooting, and lifecycle management.
• Support Active Directory backup, recovery, disaster recovery, and business continuity processes.
• Monitor Active Directory platform health, performance, security, and replication.
• Support Active Directory upgrades, migrations, consolidation projects, and infrastructure improvements.
• Implement and maintain Active Directory security hardening standards and privileged access controls.
• Administer and support Microsoft Active Directory Certificate Services (AD CS).
• Manage Certificate Authorities, certificate templates, enrolment, and certificate lifecycle processes.
• Support Offline Root CA and Issuing CA infrastructure.
• Administer Certificate Revocation Lists (CRL), Authority Information Access (AIA), and certificate distribution services.
• Monitor certificate compliance, renewals, revocations, and expiration management.
• Maintain PKI operational documentation, recovery procedures, and security standards.
• Troubleshoot cryptographic and certificate-related issues across infrastructure and security platforms.
• Support Microsoft Entra Connect and hybrid identity infrastructure.
• Maintain LDAP, LDAPS, Kerberos, and NTLM authentication services.
• Support integrations between Active Directory and enterprise identity platforms, including MIM, Entra , Okta, and Beyond Trust.
• Support authentication, directory, and identity infrastructure incidents through to resolution.
• Provide L2/L3 support for identity-related incidents and service requests.
• Troubleshoot user provisioning, synchronisation, and authentication issues.
• Collaborate with IDAM engineers to investigate root causes and implement long-term solutions.
• Develop and maintain Power Shell automation for identity infrastructure administration.
• Drive service improvements, platform optimisation, and operational efficiencies.
• Contribute to security improvement initiatives, vulnerability remediation, and infrastructure modernisation.
• Produce and maintain technical documentation, operational procedures, and support runbooks.