At a Glance
- Tasks: Support and enhance hybrid identity services in a high-security environment.
- Company: Join DXC, a leader in tech innovation with a collaborative culture.
- Benefits: Competitive salary, potential for remote work, and opportunities for professional growth.
- Other info: Work in a fast-paced environment with excellent career advancement opportunities.
- Why this job: Make a real impact on security and identity management in a dynamic setting.
- Qualifications: 5+ years in hybrid AD support and strong troubleshooting skills required.
The predicted salary is between 45000 - 45000 £ per year.
LOCATION: Client Site Aldermaston – Onsite 5 days per week (occasional WFH possible)
SECURITY CLEARANCE: DV or willing to undergo DV vetting
ROLE OVERVIEW: The Active Directory Specialist plays a pivotal role in supporting, maintaining, and enhancing a complex hybrid identity services environment that spans both On-Prem Active Directory and Entra (Azure Active Directory). Operating within a high-security, fast-paced public-sector setting, the role requires delivering expert 2nd/3rd line technical support while also contributing to long-term service transformation, infrastructure modernisation, and operational automation initiatives. You will work at the centre of enterprise identity and access management, ensuring stability, security, and performance across critical directory services including AD DS, Group Policy, ADFS, AD Connect, PKI, and a broad range of supporting technologies.
KEY RESPONSIBILITIES:
- Administer and maintain hybrid identity infrastructures across on prem Active Directory and Azure Active Directory (Entra ID), ensuring secure, reliable authentication and directory services.
- Troubleshoot and optimise identity platforms including AD, ADFS, Azure AD Connect/Sync, Entra ID, and LDAP, resolving complex federation, synchronisation, and authentication issues.
- Lead Group Policy lifecycle management, including design, implementation, and controlled deployment using AGPM to ensure consistent and secure configuration baselines.
- Manage core AD infrastructure components such as Domain Controllers, FSMO roles, DNS, DHCP, Sites & Services, ensuring resilience, correct topology, and high availability.
- Implement and enforce Azure AD security controls, including RBAC, Conditional Access, MFA, Identity Protection, PIM, and other Zero Trust aligned safeguards.
- Support Azure-based platforms including Azure Virtual Desktop, Azure Storage, and policy-driven automation using PowerShell to streamline operational tasks.
- Administer and support Windows Server environments (2016 through 2025), ensuring proper patching, performance, and service reliability.
- Manage Public Key Infrastructure (PKI) and certificate-based authentication, including lifecycle operations, template management, and secure issuance practices.
- Support and maintain Virtualisation Platforms in conjunction with Active Directory and domain architecture best practices.
- Contribute to the design and delivery of identity and infrastructure solutions, including installation, configuration, optimisation, and continuous service improvement initiatives.
- Produce comprehensive technical documentation, including HLDs, LLDs, operational guides, runbooks, and service model documentation for internal and customer use.
- Work within Agile and ITIL-aligned processes to drive continuous improvement, operational consistency, and service excellence.
- Deliver clear communication and exceptional customer service, supporting both technical and non-technical stakeholders in resolving identity and access-related issues.
- Configure and support enterprise integrations, including Azure Enterprise Applications, ADFS-integrated services, Single Sign-On (SSO), and user/application provisioning for SaaS and PaaS platforms.
ESSENTIAL SKILLS & EXPERIENCE:
- 5+ years supporting hybrid AD (On Prem & Azure AD) in enterprise environments.
- Deep knowledge of Group Policy (inc. AGPM), ADFS, AD Connect, and LDAP.
- Strong grasp of Azure AD security (RBAC, Conditional Access, MFA, PIM).
- Proficiency across Windows Server 2016/2019/2022 (benefit: legacy familiarity from 2003+), DNS/DHCP, DFS, clustering, and Windows PKI.
- Operational excellence with Domain Controllers and FSMO role management.
- Azure PowerShell scripting for automation and support.
- Experience with O365/Exchange Online and Endpoint Management in identity related contexts.
- Strong documentation and communication skills; confident working directly with senior customer stakeholders.
- Familiarity with ServiceNow (Incidents, Requests, Change, Reporting).
DESIRABLE SKILLS:
- Azure DevOps, IaC (ARM/Bicep), CI/CD pipelines; exposure to containers/Kubernetes.
- Azure Virtual Desktop (WVD/AVD) (Nerdio beneficial), Azure Monitoring and Log Analytics.
- Broader systems knowledge: SCCM, WSUS, AGPM, Lumensions.
- Understanding of the Microsoft Tiered Administration Model and enterprise segmentation.
Active Directory Specialist (on-site Aldermaston) (Open) in Hampshire employer: DXC
At DXC Technology, we pride ourselves on being an exceptional employer, particularly for those passionate about cyber security. Our Farnborough-based Security Operations Centre fosters a collaborative and inclusive work culture, offering extensive opportunities for professional growth and development while tackling complex security challenges. With a competitive salary, flexible benefits, and a commitment to continuous learning, you'll find a rewarding environment where your contributions truly matter.
