Active Directory Specialist

What this role looks like

Automated interpretation based only on the supplied job description. This is not the original job description.

What the role is really about: The supplied brief points to a role primarily centred on security, risk and governance. Alongside that, it places meaningful emphasis on operational support and reliability, analysis, discovery and requirements work, and documentation and knowledge transfer.

What you would actually be doing: In practical terms, the work described covers addressing security, risk, controls and governance requirements, supporting live services, resolving issues and maintaining reliability, implementing, deploying and delivering change, and taking ownership, leading activity and guiding others.

What this role expects from you as an applicant: The source explicitly asks for Provide escalation and remediation support during agreed out-of-hours periods where required; proven hands-on experience administering and securing Active Directory within large-scale enterprise environments; strong expertise in Active Directory security remediation, security hardening, and privilege reduction programmes; Deep understanding of Active Directory Certificate Services (AD CS) and certificate-based authentication security; and strong knowledge of Kerberos authentication, delegation models, SPNs, and service account security. The JD also looks for experience with Microsoft Entra ID (Azure AD) and hybrid identity environments; knowledge of CyberArk, BeyondTrust, Delinea, or other PAM platforms; and Exposure to Microsoft Defender for Identity and identity threat detection technologies. The role's Core Skills also point to data capability across SQL; security capability around IAM; and additional core capability in CISSP.