Active Directory Consultant

We at Qualient are seeking an experienced Senior Active Directory Consultant with 15+ years of experience, based onsite in LondonPosition: Senior Active Directory Consultant
Employment Type: Temp/Contract
Location: Onsite in Central London (SW1 - London Underground Network)
Duration: 4-6 months
Hours/Week: 30-40 hours
Team Size: 3 Consultants (including a Principal Consultant and an AD Analyst)

Role Overview

We are seeking a highly experienced Senior Active Directory Consultant to investigate, assess, and provide remediation recommendations for the client's Active Directory (AD) system and authentication methodologies. The consultant will deliver a comprehensive assessment report, identify areas of concern, and propose prioritized remediation steps in alignment with best practices and compliance requirements.

Key Responsibilities

Phase 1 - Investigation

• Conduct interviews with personnel to clarify existing AD and authentication processes.
• Review the current Active Directory architecture and design.
• Evaluate compliance with design standards, policies, and industry best practices.
• Assess security configuration of Active Directory against current threat models.
• Evaluate configuration and health of:
  • AD replication services
  • DNS
  • Authentication and authorization configurations
  • Managed File Share access (NTFS/SMB)
  • SQL databases and local server permissions
• Review data attributes within AD for consistency and accuracy.
• Assess access controls, including:
  • Nested and cyclic groups
  • Remote access
  • Linux SSH access controls
• Deliver a comprehensive report detailing all findings, vulnerabilities, and configuration gaps.

Phase 2 - Remediation Planning

• Analyze data collected from the investigation phase.
• Provide a prioritized roadmap of remediation steps with estimated levels of effort.
• Recommend architectural and process improvements to align with best practices and compliance.
• Deliver updated reports for review and approval.

Must-Have Skills & Experience

• Strong documentation and reporting skills.
• Advanced PowerShell Scripting experience.
• Proven expertise in reviewing Active Directory architecture for compliance and optimization.
• Extensive knowledge of SQL databases and local server permissions.
• Deep understanding of nested and cyclic groups in AD.
• Strong experience with:
  • Remote access controls
  • Linux SSH access controls