Active Directory Specialist

About the role

We are looking for an Active Directory Specialist to manage, secure, and optimise our directory services across multiple forests. The role involves hands‑on troubleshooting, implementation of security models, and supporting both on‑premises and Azure‑based identity solutions.

Key responsibilities

• Provide expert troubleshooting for multi‑forest Active Directory service issues (DFS, DNS, WINS, LDAP, etc.)
• Promote and demote domain controllers
• Support AD name resolution technologies (DNS, WINS, DHCP, Infoblox)
• Implement AD security methodologies (JEA, JIT, delegation models, tiered admin model)
• Perform AD schema extensions
• Create PowerShell scripts
• Support Azure AD, Azure AD DS and other Azure technologies
• Deliver IDAM projects and design processes
• Simplify complex IDAM processes and tools
• Maintain security, standards and high availability of AD architecture
• Design and review changes to Active Directory focusing on structure, delegation, tiering and management

Required profile

• Demonstrated expertise in troubleshooting multi‑forest Active Directory environments
• Experience designing and implementing AD security models such as JEA and JIT
• Proficiency in creating and maintaining PowerShell scripts for automation

Required skills

• Active Directory (multi‑forest)
• DFS, DNS, WINS, DHCP, Infoblox
• LDAP
• PowerShell scripting
• Azure AD and Azure AD DS
• JEA (Just Enough Administration)
• JIT (Just In Time) access
• Delegation models and tiered admin model
• IDAM (Identity Access Management) processes
• AD schema extensions