Associate Consultant (Identity & Access) (FTC)

Remote with occasional travel to customer sites and our Bristol HQ. Full-Time | £45,000 – £55,000 per annum (6 month - fixed term contract). Working hours: Monday to Friday (37.5 hours per week). Provisional Start Date: May 2026.

About Us

At Applicable, we specialise in delivering seamless Microsoft 365 and Unified Communications solutions to enterprise clients. As we continue to grow, we’re looking for a junior Consultant to join our growing consultancy team on a fixed term basis to support the delivery of Active Directory and Microsoft identity services across a wide range of customer environments.

The Role

In this role, you’ll work as part of a structured delivery team, supporting real‑world customer projects under the guidance of experienced consultants. You’ll be hands‑on in planning, implementing, validating, and supporting Active Directory migration and restructure activities, helping ensure projects are delivered to a high standard and customers experience minimal disruption during change.

What You’ll Do

• You’ll take ownership of defined delivery activities across identity and access engagements, contributing directly to successful outcomes.
• Typical work will include supporting Active Directory migrations and restructures such as forest/domain migrations, consolidations or separations, OU/GPO redesign, domain controller modernisation, identity object clean‑up, and coexistence/cutover activities.
• You’ll contribute to target‑state design and hands‑on build activities, helping configure core Active Directory components (including domain controllers, Sites & Services, replication, and baseline configuration), implementing OU structures and Group Policy baselines, and supporting delegated administration models that enable secure and manageable operations.
• You’ll support migration execution through well‑run pilots and waves, improving and following runbooks and checklists, completing validation steps and capturing evidence, and troubleshooting authentication, policy, and directory issues during pilots and cutovers.
• You’ll also work with adjacent teams on dependencies such as DNS, certificate services, network services, endpoint/domain join processes, and directory synchronisation to Microsoft Entra ID (Azure AD) where applicable.
• Throughout delivery, you’ll maintain clear technical documentation (design inputs, build notes, as‑built records, validation evidence) and support knowledge transfer to BAU teams, including early life support / hypercare where required.

What We’re Looking For

You’ll already have hands‑on delivery experience supporting Active Directory migrations and restructures and be comfortable working in customer environments. You’ll be methodical, delivery‑focused, and able to work independently on assigned tasks while collaborating closely with the wider delivery team. Strong communication skills are essential, as you’ll work with stakeholders across infrastructure, security, service desk and application teams, and you’ll be expected to document your work clearly and accurately.

Essential experience

• Hands-on delivery experience supporting Active Directory migrations and restructures (domain moves, forest migrations, consolidations, or separations).
• Deep technical Active Directory expertise, including forest/domain build, trusts, DNS, Sites & Services, replication, domain controller operations, and identity/authentication troubleshooting.
• Hands-on experience using Active Directory migration tooling (e.g., Quest) to support staged migrations, coexistence, reporting, and validation.
• Strong OU, Group Policy, and delegated administration skills, including baseline hardening and troubleshooting policy application.
• Experience with identity object clean-up and remediation (users, groups, service accounts), including resolving conflicts/collisions and improving data quality.
• Strong operational approach, able to follow and improve runbooks, execute repeatable steps, capture validation evidence, and support controlled cutovers.

Desirable experience

• Understanding of directory synchronisation concepts to Microsoft Entra ID (Azure AD) (e.g., Entra Connect/AAD Connect), including object scoping and common sync issues during transitions.
• Experience supporting an AD privileged access model (separate admin accounts, tiering, delegation patterns) and hardening controls.
• Experience with endpoint/device migration impacts (domain join strategy, profile migration considerations, MDM integration) during identity changes.
• Experience producing operational handover artefacts and supporting hypercare models post‑cutover.

Why Join Us?

• Supportive team culture with a focus on learning and development.
• Exposure to enterprise-level deployments and cutting-edge technologies.
• Great employee benefits which include:

• 25 days holiday (plus bank holidays)
• Company pension
• Income Protection
• Health Cash Plan
• Death in Service (4 x salary)
• Training & Development
• Employee discounts
• Volunteer Day

If you are passionate about IT and excited by this role but do not meet all the requirements or your experience does not align perfectly, please apply anyway – you may just be the right candidate we are looking for!

NO AGENCIES PLEASE