Active Directory Specialist

Technical AD / Entra Consultant - London, UK (Onsite)

Need someone mainly onsite in London (inside IR35). Role is in the Westminster London area.

Here is the required work. We are in between Phase 1 and 2. We are still gathering information.

Phase 0 - Project Initiation

During the Project Initiation Phase, the Supplier will work with QRT to develop the project framework, including the initial project plans and methods of working. QRT will also enable the Supplier’s delivery team by providing QRT accounts, allowing the Supplier’s team to progress activities under this SOW. Supplier and QRT will conduct a workshop to define the project approach and confirm the scope of work.

During the Project Kick-off, all parties will:

• Confirm the Scope of Services within this SOW
• Agree on roles and responsibilities
• Agree on the Project Management approach and project timelines
• Agree on the Project Governance approach
• Confirm details for any QRT change freezes or other significant events that may impact the project

Throughout the project, the Supplier will provide updates by attending weekly status update meetings. Supplier will work alongside the QRT project team to support the QRT-defined Communications Plan.

During this Phase, the Supplier will engage with QRT to execute a series of utilities to gather data for analysis. The Supplier will support QRT, or their nominated 3rd party, with the execution of the utilities and the gathering of the results. The list of utilities to be run are listed in Appendix A. The Supplier will provide QRT with instructions and support on executing these utilities and agree the method for making the reports available to Supplier resources for analysis. The Supplier will also conduct a series of interviews with QRT personnel to clarify existing processes and answer analysis questions.

The following activities will be carried out by the Supplier, once the utilities have been executed and the results provided, as part of the Authentication and Active Directory review:

• Review the current Active Directory architecture and design, including compliance with existing QRT design standards, policies, and processes
• Evaluation of the current configuration and QRT standards against industry and compliance best practices
• Review the security configuration of Active Directory against current threats
• Evaluate the configuration and health of any Active Directory replication services
• Evaluate the configuration and health of any Domain Name Service (DNS)
• Review of Active Directory authentication and authorization configuration
• Review of the data attributes held within Active Directory for consistency and accuracy
• Perform a review of the following systems for permission allocation, consistency of approach against best practice for the following:

• Active Directory Managed File Share access (NTFS / SMB)
• NTFS
• Deployed SQL databases local server permissions

The Supplier will provide QRT with a comprehensive report covering the findings of the Investigation phase including:

• All observations following the execution of the utilities listed in Appendix A, including for:

• Active Directory
• Active Directory Managed File Share access (NTFS / SMB)
• NTFS File Share access
• SQL Access Controls permissions
• Local server permissions
• Service Accounts access permissions
• Identified vulnerabilities and configuration gaps
• Nested Groups and Cyclic Nested Groups
• Remote Access controls

Phase 2 – Remediation Planning

During this Phase, the Supplier will undertake an analysis exercise of the data from the Investigation phase and provide an updated report covering recommendations and remediation steps. The updated report will include:

• Prioritisation for remediation
• Remediation steps and estimated level of effort
• Recommendations for Architectural changes