Queen Square Recruitment
Active Directory Specialist
Reading
£450/day
Posted about 14 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Active Directory Specialist
Location: Reading, UK
Work Model: Hybrid – 2 days per week in office
Contract Duration: 12 Months
Rate: £450 per day (Inside IR35)
Key Responsibilities
- Lead and drive Active Directory security remediation activities across complex enterprise environments.
- Perform Active Directory administration and governance at Domain Admin and Enterprise Admin levels.
- Identify, assess, prioritise, and remediate identity-related vulnerabilities, security misconfigurations, and privilege escalation risks.
- Review, harden, and secure Active Directory Certificate Services (AD CS), authentication mechanisms, and delegation models.
- Manage and govern privileged access controls, service accounts, administrative groups, permissions, and access pathways.
- Coordinate remediation activities across infrastructure, security, server, database, application, and support teams.
- Plan, execute, and govern production changes while ensuring effective change, risk, and operational management processes are followed.
- Produce detailed technical documentation, remediation evidence, governance reports, and executive-level status updates.
- Collaborate with security architects, programme teams, and business stakeholders to ensure successful delivery of remediation objectives.
- Support enterprise initiatives focused on identity security improvement, cyber resilience, compliance, and security governance.
- Conduct root-cause investigations and provide recommendations for resolving complex identity, authentication, and access management issues.
- Provide escalation and remediation support during agreed out-of-hours periods where required.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Skills
- Proven hands-on experience administering and securing Active Directory within large-scale enterprise environments.
- Strong expertise in Active Directory security remediation, security hardening, and privilege reduction programmes.
- Deep understanding of Active Directory Certificate Services (AD CS) and certificate-based authentication security.
- Strong knowledge of Kerberos authentication, delegation models, SPNs, and service account security.
- Experience reviewing and remediating AD permissions, ACLs, privileged groups, and administrative access paths.
- Strong knowledge of Microsoft Identity & Access Management (IAM) technologies and security principles.
- Experience with Privileged Access Management (PAM) and least-privilege security models.
- Experience delivering security remediation activities within live production environments, including change and risk management.
- Ability to coordinate technical activities across multiple teams and stakeholders.
- Strong analytical, troubleshooting, and problem-solving skills for complex identity and security challenges.
- Excellent stakeholder engagement, communication, and documentation skills.
- Experience producing remediation plans, technical reports, governance documentation, and executive updates.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- Experience with Microsoft Entra ID (Azure AD) and hybrid identity environments.
- Knowledge of CyberArk, BeyondTrust, Delinea, or other PAM platforms.
- Exposure to Microsoft Defender for Identity and identity threat detection technologies.
- Experience implementing Tiered Administration, ESAE (Red Forest), or similar privileged access security models.
- Understanding of Microsoft Security Baselines, CIS Controls, and Active Directory security best practices.
- Experience using tools such as PingCastle, BloodHound, Purple Knight, or similar Active Directory security assessment solutions.
- Experience supporting large-scale security transformation or remediation programmes.
- Knowledge of SQL Server security, authentication, and privileged access governance.
- Relevant certifications including:
- Microsoft Certified: Identity and Access Administrator Associate
- Microsoft Certified: Security Operations Analyst Associate
- CISSP
- CISM
- Or equivalent security certifications
- Experience working within regulated environments with strong governance, audit, compliance, and risk management requirements.
Apply now to learn more about this exciting contract opportunity.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Active Directory
Security Remediation
AD CS
Kerberos Authentication
Privileged Access Management
Identity & Access Management
Microsoft Entra ID
Security Hardening
Privilege Escalation Risk Assessment
Change Management
Stakeholder Engagement
Technical Documentation
Network Security
Governance
Cyber Resilience
Identity Threat Detection
Location