Senior Active Directory Engineer​/Architect

Senior Active Directory Engineer / Architect

Salary: £80,000 – £100,000 (depending on experience)

Location: Remote (UK-based with some UK/US timezone overlap)

Our client is a highly regarded Microsoft consultancy specialising in enterprise‑scale migration, modernisation, and identity security projects. They help global organisations simplify and unify complex IT environments, delivering seamless transitions across Active Directory, Entra  (Azure AD), Microsoft 365, and hybrid infrastructures. Known for their no‑nonsense approach, they plan and execute every engagement around the client’s business needs, ensuring minimal disruption and maximum value.

You’re an experienced Senior Active Directory Engineer or Architect with deep technical expertise and a consultative mindset. You thrive in projects that balance hands‑on technical delivery with high‑level design and advisory work. You’re confident leading enterprise migrations, securing and modernising complex AD estates, and communicating with clients at both technical and executive levels. Excellent communication skills are essential, along with the ability to work independently in a remote, multi‑project consulting environment.

This is a senior, client‑facing role that will take ownership of Active Directory and Entra  across enterprise customers. You’ll lead design, architecture, and delivery efforts for AD modernisation, security hardening, and migration engagements, often part of larger M&A or transformation programmes. The position offers full remote flexibility, autonomy, and an opportunity to make a real impact shaping the direction of future projects as the business continues to grow.

You’ll work closely with other senior consultants and directors, often leading your own engagements with support from project management. Depending on timing, you may take over an active project or lead a new one from inception.

• Lead assessments, design, and delivery of enterprise Active Directory and Entra .
• Deliver a mix of AD‑to‑AD, AD‑to‑Entra , and cloud‑only transformations.
• Architect secure, compliant, and modern identity platforms aligned to Microsoft best practices.
• Create and maintain technical deliverables — design documents, blueprints, migration runbooks, and remediation plans.
• Engage directly with clients, providing expert guidance on AD modernisation and security improvements.
• Operate with autonomy while maintaining clear communication with the wider delivery team and leadership.

• Significant experience designing, securing, and managing Microsoft Active Directory at enterprise scale.
• Proven track record in multi‑forest/domain migrations, domain collapses, and greenfield builds.
• Solid understanding of supporting services: DNS/DHCP, Certificate Services, RADIUS/NPS, Group Policy.
• Strong knowledge of AD security models, Microsoft tiering, LAPS, PAWs, and privileged access controls.
• Experience integrating AD with Entra  (Azure AD) and designing hybrid identity architectures.
• Excellent written and spoken English communication skills.
• Ability to work remotely with minimal supervision, managing multiple projects effectively.
• Familiarity with Entra Connect Sync, Intune, and passwordless authentication (FIDO2, Windows Hello for Business).
• Experience with Okta or other enterprise IdPs (Ping, SailPoint, etc.).
• Hands‑on experience with Sentinel, Defender for Identity, or equivalent identity monitoring tools.
• Knowledge of AD replication, forest decommissioning, and Windows Server 2025.

If you are interested, please submit your CV through our recruitment agency.