Active Directory Engineer - 12 Month Contract - Hybrid in Reading - Inside IR35

Active Directory Engineer - 12 Month Contract - Hybrid in Reading - Inside IR35

Role Overview

We are looking for an AD Security Remediation Engineer to join on a 12-month hybrid contract based in Reading (2 days on-site), with escalation support required outside of core hours. The role is part of a large-scale enterprise security transformation programme, playing a key role in strengthening the identity and access management landscape by addressing critical Active Directory security vulnerabilities, reducing cyber risk, and improving security resilience across a complex, multi-domain global environment.

Key Responsibilities

• Lead Active Directory security remediation activities across complex enterprise environments, performing administration and governance at Domain Admin and Enterprise Admin levels, and assessing, prioritising, and remediating identity-related vulnerabilities, misconfigurations, and privilege escalation risks
• Review and harden Active Directory Certificate Services (AD CS), Kerberos authentication, delegation configurations, SPNs, and service account security
• Manage privileged access controls, administrative groups, service accounts, and permissions governance, reviewing and remediating AD permissions, ACLs, and privileged group memberships
• Plan, implement, and govern production changes across infrastructure, security, server, database, and application support teams, ensuring minimal business disruption and effective risk management
• Produce remediation documentation, validation evidence, and executive-level progress reporting, collaborating with security architects, project managers, and customer stakeholders to drive remediation outcomes

Top 5 Skills

• Strong hands-on experience administering and securing Active Directory in large enterprise environments, with proven expertise in AD security remediation, hardening, and privilege reduction initiatives
• Deep knowledge of Active Directory Certificate Services (AD CS), certificate-based authentication security, Kerberos authentication models, and delegation controls
• Experience reviewing and remediating AD permissions, ACLs, privileged groups, and administrative access paths, with knowledge of PAM and least-privilege principles
• Experience managing security remediation programmes within production environments including change and risk management, coordinating across infrastructure, security, application, and support teams
• Strong stakeholder management, communication, and documentation skills - desirable: experience with PAM platforms (CyberArk, BeyondTrust, Delinea), Microsoft Defender for Identity, AD assessment tools (PingCastle, BloodHound, Purple Knight), and Microsoft Entra ID hybrid identity management

Contract Details:

• Rate: £450 per day Inside IR35
• Location: Hybrid (2x a week) in Reading
• Contract Length: 12 - Month Initial Contract