Active Directory & Microsoft Entra ID Engineer

Role

Responsibilities

• Manage on-premises Active Directory and Microsoft Entra ID, including users, groups, devices, and identity lifecycle.
• Administer Domain Controllers, perform migrations with minimal disruption, and manage Group Policy.
• Implement and support hybrid identity and Entra Connect; support migration from on-premises Active Directory toward Entra ID.
• Manage MFA, Conditional Access, RBAC, and Privileged Identity Management.
• Support application integration and SSO using SAML, OAuth 2.0, and OpenID Connect.
• Implement Certificate Services / PKI, conduct AD RAP and health assessments, and prepare remediation plans.
• Remediate identity vulnerabilities, troubleshoot authentication and sign-in issues, monitor logs, and support incident investigations.
• Develop SOPs, runbooks, technical documentation, and operational reports; coordinate with Security, Infrastructure, Application, and DWP teams.

Technical areas

• Active Directory, Microsoft Entra ID, Domain Controllers, Group Policy, and Entra Connect.
• MFA, Conditional Access, RBAC, PIM, SSO, SAML, OAuth 2.0, and OpenID Connect.
• Certificate Services / PKI, identity health assessments, vulnerability remediation, and incident investigation.

Requirements

• The role is identified as an L3 / Senior Engineer position.
• Ability to administer on-premises Active Directory and Microsoft Entra ID environments.
• Ability to manage Domain Controllers and perform migrations with minimal service disruption.
• Ability to manage Group Policy and troubleshoot directory authentication issues.
• Ability to support hybrid identity and Entra Connect environments.
• Ability to manage MFA, Conditional Access, RBAC, and Privileged Identity Management.
• Ability to support SSO integrations using SAML, OAuth 2.0, and OpenID Connect.
• Ability to implement and manage Certificate Services / PKI.
• Ability to assess identity environments, remediate vulnerabilities, and investigate identity-related incidents.
• Ability to develop technical documentation, SOPs, runbooks, and operational reports.