Active Directory & Entra Security Engineers in Gloucester

United Kingdom - Gloucestershire

Senior Active Directory Security Engineers / Consultants x 3 Contract Positions

Initial 6-Month Contracts | Hybrid / Flexible Onsite Attendance | ASAP Start

We are recruiting three experienced Active Directory Security Engineers / Consultants to support a major international organisation with a programme of Active Directory security hardening, remediation and identity resilience improvements.

This is a hands-on technical delivery role, requiring individuals with extensive experience of traditional on-premises Active Directory environments, Windows Server infrastructure and enterprise security.

We're looking for engineers who have spent years working with complex, business-critical AD environments and understand not only how to implement security improvements, but also the potential operational impact of making changes within established infrastructure.

Key Responsibilities

• Lead hands-on Active Directory security hardening and remediation activities across a complex enterprise environment.
• Design and implement AD administrative tiering models, including Tier 0 security and privileged access controls.
• Review security assessments and technical findings, translating recommendations into practical remediation plans.
• Implement identity security improvements, authentication controls and privileged account protection.
• Assess legacy Windows Server environments, authentication protocols, Group Policy and security configurations.
• Understand and manage the operational dependencies and risks associated with security changes.
• Support Active Directory resilience, recovery planning and cyber recovery readiness.
• Work closely with Infrastructure, Cyber Security and Architecture teams to implement improvements safely.
• Produce technical documentation, implementation plans and operational procedures.
• Take ownership of defined workstreams, delivering measurable security improvements with minimal supervision.
• Extensive hands-on experience administering, engineering and securing on-premises Microsoft Active Directory.
• Proven experience delivering AD hardening, security remediation and privileged access improvements.
• Strong knowledge of Active Directory administrative tiering, Tier 0 security, domain controllers and Group Policy.
• In-depth understanding of Windows Server environments, including legacy infrastructure and associated security dependencies.
• Experience working with authentication protocols, including Kerberos, NTLM and SMB, and understanding the implications of changing or disabling legacy configurations.
• Experience implementing security recommendations within complex, business-critical environments without disrupting operations.
• Strong PowerShell scripting and troubleshooting capabilities.
• Experience working independently within large enterprise environments, taking ownership of technical delivery.
• Good understanding of ITIL, change management, technical documentation and operational handover.

Highly Desirable

• Previous involvement in cyber security incidents, Active Directory recovery or post-incident remediation.
• Experience with AD forest recovery, identity resilience and disaster recovery planning.
• Microsoft Defender for Identity, Entra ID and hybrid identity security experience.
• Experience implementing Privileged Access Workstations (PAW) or similar privileged access security controls.
• Experience working within global, manufacturing, engineering or other operationally complex organisations.

The Opportunity

These are delivery-focused contract positions, rather than business-as-usual support roles.

You’ll be joining an established technical environment, working with internal infrastructure and security specialists to deliver a defined programme of security improvements.

We’re particularly interested in experienced engineers who can assess an existing environment, understand its complexities, identify the safest approach and independently implement the required changes.

Contract Details

• Positions: 3
• Duration: Initial 6 months
• Day Rate: Negotiable
• IR35: Status to be confirmed
• Location: Predominantly remote, with occasional onsite attendance for technical workshops, planning and collaboration
• Start: ASAP

If you have extensive hands-on Active Directory security experience and have delivered complex hardening or remediation programmes, we’d be keen to hear from you.

#J-18808-Ljbffr