Senior Identity Infrastructure Engineer – Active Directory and PKI
Location: Manchester or Inverness, within secure facilities
About the role
We are seeking an experienced Senior Identity Infrastructure Engineer to support the platforms underpinning enterprise Identity and Access Management (IDAM) services.
You will administer, maintain and improve Active Directory, PKI, DNS, Group Policy and authentication infrastructure, providing L2/L3 operational support. Working with security, infrastructure and IDAM teams, you will help ensure critical identity services remain available, resilient and secure.
Key responsibilities
Active Directory
• Administer enterprise forests, domains, domain controllers, Sites and Services, replication and trusts.
• Manage AD-integrated DNS and Group Policy design, implementation and troubleshooting.
• Monitor platform health, performance, security and replication.
• Support AD backup, recovery, disaster recovery, upgrades, migrations and consolidation.
• Implement security hardening and privileged access controls.
Public Key Infrastructure
• Administer Microsoft Active Directory Certificate Services (AD CS), including Offline Root and Issuing CAs.
• Manage certificate authorities, templates, enrolment and certificate lifecycle processes.
• Maintain Certificate Revocation Lists (CRL), Authority Information Access (AIA) and certificate distribution services.
• Monitor certificate compliance, renewals, revocations and expiry.
• Maintain PKI documentation, recovery procedures and security standards.
• Troubleshoot cryptographic and certificate-related issues.
Identity and operational support
• Support Microsoft Entra Connect and hybrid identity infrastructure.
• Maintain LDAP, LDAPS, Kerberos and NTLM authentication services.
• Support AD integrations with Microsoft Identity Manager (MIM), Entra ID, Okta and BeyondTrust.
• Provide L2/L3 support for incidents and requests, including provisioning, synchronisation and authentication issues.
• Investigate root causes with IDAM engineers and implement lasting solutions.
• Support wider identity operations during periods of increased demand.
Automation and improvement
• Develop PowerShell automation for identity infrastructure administration.
...
Identity Infrastructure Engineer employer: Cerco Careers
Cerco is an excellent employer for those looking to kickstart their IT careers, offering full training and support to ensure you thrive in the field. With a strong focus on employee growth and development, our collaborative work culture fosters enthusiasm and learning, making it an ideal environment for entry-level engineers. Located in Crewe, we provide unique opportunities to work with major UK businesses, ensuring that every team member is equipped with the skills and confidence needed for success.
