RecruitmentRevolution.com
Reporting line: David Bartoli (Sales Director) Office location: The Ministry, London SE1 Hybrid working: 2-3 days a week UP3 is a fast-growing ServiceNow boutique working with complex, regulated organisations across public sector, CNI, transport, defence and legal. We re hiring an Account Director to look after a small portfolio of enterprise customers and help those relationships grow. For customers, you ll be their go-to person, building relationships up to C-suite and helping them get more from ServiceNow through adoption, optimisation, automation and AI-led change. For UP3, you ll help us stay sharp on what matters in each account and keep sales and delivery tightly aligned, so we sell the right work and deliver it brilliantly. It s a high-trust role with real autonomy. You ll own the whole process (prospecting, proposals, pricing and negotiation) and set the direction for each account, without the layers of process you d usually see in a big SI or global consultancy. Role and Key Responsibilities • Own the commercial relationship across a small set of key enterprise accounts (2-3) and build a clear plan to grow them over the next few years. • Build strong relationships with senior stakeholders (up to C-suite) so you can spot, shape and close bigger, more complex opportunities. • Lead pricing and contract conversations, partnering closely with delivery leaders so what we sell is realistic and what we deliver is excellent. • Run commercial conversations on scope, pricing and terms, and keep your pipeline up to date so everyone s clear on what s landing when. • Be the person customers come to when something needs sorting quickly. • Bring a steady rhythm to forecasting and keep things transparent internally. What You ll Be Selling You ll be selling high value, consultative services (not licences): • Managed Support Services (MSS) ongoing support, triage and issue resolution • Managed Development Services (MDS) ServiceNow app development (days per year) • Professional Services (PS) project-based delivery Customers are usually mid-market (around (phone number removed) people) and operate in regulated or mission critical environments. Alongside our managed and project services, we also help customers get more from ServiceNow through adoption and optimisation, plus AI-led automation. Who You ll Be Selling To • Mid-market enterprise and public sector organisations, often operating at national or global scale. • Regulated, mission critical settings (defence, CNI, transport, legal, healthcare). • Long-term relationships rather than one-off, transactional work. You ll work with customers who are investing heavily in ServiceNow as a core platform for operations and transformation, including AI led automation. Deal Profile, Sales Motion and Compensation Salary: Competitive salary and generous OTE (50/50), aligned to experience and overall target. Account model: Land and expand within existing enterprise customers Expected deal sizes: £500k - £2m+ (with multiyear expansion potential) Sales cycles: Expect 18-24 months, shorter than this is uncommon Stakeholders: Platform owners, IT leadership, transformation leads and procurement Growth expectation: c. 20-30% YoY growth across a small portfolio of accounts You ll do well here if you re disciplined, patient and credible, this isn t about quick wins. We build real relationships with customers and keep conversations honest, which is what creates the opportunities (and the impact) over time. What We re Looking For You don t need to tick every box, if you recognise yourself in most of these we d like to talk: • ServiceNow experience is beneficial, but not essential - transferrable enterprise sales experience matters more • Strong experience in strategic account management and/or enterprise sales. • Proven track record of expanding large, complex accounts. • Background in managed services, consulting or enterprise technology environments • Comfortable engaging at executive and board level. • Commercially sharp, with a structured way of running deals. • Enjoys a fast-moving environment with high standards. Experience from large SIs is welcome if you enjoy being hands on and operating without layers of process. Benefits What s in it for you? • A genuinely Great Place to Work - we ve been certified since 2022. Click here to hear more about what s it like to work at UP3 - Careers ServiceNow elite partner UP3 • Inclusive and supportive working environment. Click here to hear more about how UP3 supports Women in Tech - Women at UP3 ServiceNow Careers Elite Partner • Vitality private healthcare, GP access, Bupa dental care and onsite gym. • Enhanced parental leave package, pension (4% employer contribution) and life insurance. • Comprehensive training, professional development and career progression - we invest in our people and actively promote from within. • 25 days holiday (increasing with tenure), plus bank holidays. • £250 home office setup allowance to get your desk, chair and kit sorted. • Best in class tech stack, tools and training. We re committed to providing all you need to be successful in this role • Amazing customers and a best-in-class solution. Click here to see the type of customer success stories you ll be supporting - UP3 ServiceNow Case Studies And Customer Success Stories Application notice We take your privacy seriously. As you might expect you may be contacted by email, text or telephone. Your data is processed by our talent partner RR (Recruitment Revolution) on the basis of their legitimate interests in fulfilling the recruitment process. Please refer to their Data Privacy Policy & Notice on their website for further details.
Reporting line: David Bartoli (Sales Director) Office location: The Ministry, London SE1 Hybrid working: 2-3 days a week UP3 is a fast-growing ServiceNow boutique working with complex, regulated organisations across public sector, CNI, transport, defence and legal. We re hiring an Account Director to look after a small portfolio of enterprise customers and help those relationships grow. For customers, you ll be their go-to person, building relationships up to C-suite and helping them get more from ServiceNow through adoption, optimisation, automation and AI-led change. For UP3, you ll help us stay sharp on what matters in each account and keep sales and delivery tightly aligned, so we sell the right work and deliver it brilliantly. It s a high-trust role with real autonomy. You ll own the whole process (prospecting, proposals, pricing and negotiation) and set the direction for each account, without the layers of process you d usually see in a big SI or global consultancy. Role and Key Responsibilities • Own the commercial relationship across a small set of key enterprise accounts (2-3) and build a clear plan to grow them over the next few years. • Build strong relationships with senior stakeholders (up to C-suite) so you can spot, shape and close bigger, more complex opportunities. • Lead pricing and contract conversations, partnering closely with delivery leaders so what we sell is realistic and what we deliver is excellent. • Run commercial conversations on scope, pricing and terms, and keep your pipeline up to date so everyone s clear on what s landing when. • Be the person customers come to when something needs sorting quickly. • Bring a steady rhythm to forecasting and keep things transparent internally. What You ll Be Selling You ll be selling high value, consultative services (not licences): • Managed Support Services (MSS) ongoing support, triage and issue resolution • Managed Development Services (MDS) ServiceNow app development (days per year) • Professional Services (PS) project-based delivery Customers are usually mid-market (around (phone number removed) people) and operate in regulated or mission critical environments. Alongside our managed and project services, we also help customers get more from ServiceNow through adoption and optimisation, plus AI-led automation. Who You ll Be Selling To • Mid-market enterprise and public sector organisations, often operating at national or global scale. • Regulated, mission critical settings (defence, CNI, transport, legal, healthcare). • Long-term relationships rather than one-off, transactional work. You ll work with customers who are investing heavily in ServiceNow as a core platform for operations and transformation, including AI led automation. Deal Profile, Sales Motion and Compensation Salary: Competitive salary and generous OTE (50/50), aligned to experience and overall target. Account model: Land and expand within existing enterprise customers Expected deal sizes: £500k - £2m+ (with multiyear expansion potential) Sales cycles: Expect 18-24 months, shorter than this is uncommon Stakeholders: Platform owners, IT leadership, transformation leads and procurement Growth expectation: c. 20-30% YoY growth across a small portfolio of accounts You ll do well here if you re disciplined, patient and credible, this isn t about quick wins. We build real relationships with customers and keep conversations honest, which is what creates the opportunities (and the impact) over time. What We re Looking For You don t need to tick every box, if you recognise yourself in most of these we d like to talk: • ServiceNow experience is beneficial, but not essential - transferrable enterprise sales experience matters more • Strong experience in strategic account management and/or enterprise sales. • Proven track record of expanding large, complex accounts. • Background in managed services, consulting or enterprise technology environments • Comfortable engaging at executive and board level. • Commercially sharp, with a structured way of running deals. • Enjoys a fast-moving environment with high standards. Experience from large SIs is welcome if you enjoy being hands on and operating without layers of process. Benefits What s in it for you? • A genuinely Great Place to Work - we ve been certified since 2022. Click here to hear more about what s it like to work at UP3 - Careers ServiceNow elite partner UP3 • Inclusive and supportive working environment. Click here to hear more about how UP3 supports Women in Tech - Women at UP3 ServiceNow Careers Elite Partner • Vitality private healthcare, GP access, Bupa dental care and onsite gym. • Enhanced parental leave package, pension (4% employer contribution) and life insurance. • Comprehensive training, professional development and career progression - we invest in our people and actively promote from within. • 25 days holiday (increasing with tenure), plus bank holidays. • £250 home office setup allowance to get your desk, chair and kit sorted. • Best in class tech stack, tools and training. We re committed to providing all you need to be successful in this role • Amazing customers and a best-in-class solution. Click here to see the type of customer success stories you ll be supporting - UP3 ServiceNow Case Studies And Customer Success Stories Application notice We take your privacy seriously. As you might expect you may be contacted by email, text or telephone. Your data is processed by our talent partner RR (Recruitment Revolution) on the basis of their legitimate interests in fulfilling the recruitment process. Please refer to their Data Privacy Policy & Notice on their website for further details.
Data Controller, VE Ltd
Maidenhead, Berkshire
Maidenhead, United Kingdom Posted on 07/05/2026 VE3 is a technology and business consultancy focused on delivering end-to-end technology solutions and products. We have successfully serviced enterprises across multiple markets, including the public and private sectors. Our services span all aspects of business, providing a holistic approach to managing an organization. We are committed to providing technical innovations and tools that empower organizations with critical information to facilitate decision-making that results in business transformation through cost savings and increased operational efficiency. Our commitment to quality is adopted throughout the organization and sets the foundation for delivering our full suite of capabilities. Job Description Active Directory and Entra Specialist Purpose of the Role The Active Directory / Entra Specialist is the technical authority for the customer's hybrid identity platform. The role owns the design, operation, security, and continuous improvement of on-premises Active Directory Domain Services, Group Policy, ADFS, Entra ID (P2), Azure AD Connect, B2B and B2C flows, Conditional Access, MFA, Intune, and identity lifecycle automation across all in-scope business programmes. Identity is the foundation of every other workload in the estate. This role therefore underwrites the availability, security and compliance of M365, SharePoint, Power Platform, Dynamics 365, Fabric and Azure services. The post-holder is on the front line for any P1 authentication outage, Conditional Access misconfiguration, or directory replication failure. Requirements Key Technical Responsibilities Hybrid Active Directory Operations Administer multi-forest on-premises Active Directory Domain Services (modern schema, WS2016+ functional level), including domain controllers, FSMO roles, sites and services, replication topology, DNS, DHCP, time service (NT5DS), and trust relationships. Maintain and harden Group Policy Objects across the estate, including baseline security GPOs, audit policies, AppLocker / WDAC, BitLocker, Windows Update for Business, and computer/user configuration drift detection. Operate and patch ADFS on legacy Windows Server (where present), administer claims rules, relying party trusts, certificate rotation, and plan migration of relying parties to Entra ID where commercially appropriate. Manage Azure AD Connect (auto-updating) including sync rules, source anchor, password hash sync / pass-through authentication, seamless SSO, staging mode validation, and re-permission / re-baseline activities. Diagnose and remediate replication failures, lingering objects, USN rollback, tombstone issues, NTLM/Kerberos auth failures, SPN duplication, and time-skew problems using repadmin, dcdiag, klist, KDCDiag, ADReplStatus and Microsoft 365 Connectivity Analyzer. Entra ID and Identity Lifecycle Administer Entra ID P2 tenants including users, groups, dynamic groups, administrative units, application registrations, enterprise applications, service principals, managed identities, and consent workflows. Configure and operate Conditional Access (sign-in risk, user risk, named locations, device compliance, session controls), Multi-Factor Authentication, passwordless sign-in (Windows Hello for Business, FIDO2, Authenticator), and Temporary Access Pass for onboarding. Operate Privileged Identity Management (PIM) for just-in-time role activation, approval workflows, access reviews and break-glass account governance; work with the on-premises PAM solution for tier-0 administration. Manage Entra ID B2B (guest collaboration) and B2C (custom policies, user flows, identity providers, custom branding, application integrations) for both internal and external-facing tenants. Implement Identity Governance: Entitlement Management, Access Packages, Access Reviews, Lifecycle Workflows, and HR-driven inbound provisioning where in scope. Endpoint Management with Intune Administer Microsoft Intune including device enrolment (Autopilot, Apple ABM, Android Enterprise), configuration profiles, compliance policies, app protection policies (MAM), Conditional Access integration, and Endpoint Privilege Management. Define and maintain Windows update rings, feature update profiles, driver update profiles, and Defender for Endpoint baselines via Intune Security Baselines. Operate Win32 / LOB / Microsoft Store app deployment, package authoring (intunewin), update rings, and supersedence chains. Co-manage devices with Configuration Manager where present, troubleshoot enrolment failures using IME logs, MDM Diagnostics Tool, and the Intune Troubleshooting portal. Identity Automation and Tooling Author and maintain PowerShell automation using Microsoft Graph PowerShell SDK, Az PowerShell, ExchangeOnlineManagement, MSOnline (legacy), AzureAD (legacy), and ActiveDirectory modules - including JML (Joiner-Mover-Leaver) workflows, group membership reconciliation, stale object cleanup, and licence assignment. Build and operate identity-related runbooks in Azure Automation, Logic Apps, or Power Automate where appropriate. Use Microsoft Graph (REST + SDK) for advanced reporting, bulk operations, and integration with HR / ITSM platforms. Service Operations Own L2/L3 incident, problem and change resolution for identity-related tickets, achieving the contractual SLAs: P1 1-hour response / 4-hour resolution, P2 4-hour response / 1 working day resolution, P3 1 working day response / 3 working days resolution. Lead root cause analysis (RCA) for P1 identity incidents and produce post-incident review reports within five working days. Contribute to monthly service reports with identity KPIs (sign-in success rate, MFA coverage, Conditional Access policy hits, privileged role activations, sync health, AAD Connect latency, certificate expiry watchlist). Participate in CAB review, change scheduling, and change risk assessment for identity changes; produce rollback plans and pre/post implementation checks. Mandatory Technical Skills Active Directory Domain Services on Windows Server 2016+ including schema management, sites and services, GPO design, ADFS, AD CS, AD Recycle Bin, and DR/recovery procedures (authoritative restore). Entra ID P2 deep configuration: Conditional Access, MFA, PIM, Identity Protection (sign-in risk, user risk, risky users), Identity Governance, Application Proxy, External Identities (B2B, B2C custom policies), and Hybrid Identity (AAD Connect). Microsoft Intune end-to-end device and application management, including Autopilot pre-provisioning, compliance, configuration, and Endpoint Security baselines. PowerShell scripting (intermediate-to-advanced) using Microsoft Graph SDK, Az, and ActiveDirectory modules; ability to read / debug / extend existing scripts under change control. Working knowledge of Microsoft Defender for Identity (formerly Azure ATP) signals and integration with Defender XDR. Networking fundamentals: DNS, Kerberos, NTLM, OAuth 2.0, OpenID Connect, SAML 2.0, WS-Federation, certificate-based authentication, TLS/SSL troubleshooting, and modern auth flows. Working knowledge of ITIL v4 incident, problem, change and configuration management, and ITSM ticketing (e.g., ServiceNow, Jira Service Management). Desirable Technical Skills Entra Permissions Management (CIEM). Microsoft Entra ID Verified ID (decentralised identity) familiarity. Group Policy Analytics in Intune for cloud migration. Experience operating tier-0 PAM solutions (CyberArk, BeyondTrust, Delinea) on-premises. Familiarity with FIDO2 hardware tokens, Windows LAPS (cloud), and Authentication Methods migration. Exposure to Azure VPN Gateway, ExpressRoute, and hybrid connectivity for identity authentication paths. Required Certifications Microsoft Certified: Identity and Access Administrator Associate (SC-300) - mandatory. Microsoft 365 Certified: Administrator Expert (MS-102) - preferred. Microsoft Certified: Cybersecurity Architect Expert (SC-100) - desirable.
Maidenhead, United Kingdom Posted on 07/05/2026 VE3 is a technology and business consultancy focused on delivering end-to-end technology solutions and products. We have successfully serviced enterprises across multiple markets, including the public and private sectors. Our services span all aspects of business, providing a holistic approach to managing an organization. We are committed to providing technical innovations and tools that empower organizations with critical information to facilitate decision-making that results in business transformation through cost savings and increased operational efficiency. Our commitment to quality is adopted throughout the organization and sets the foundation for delivering our full suite of capabilities. Job Description Active Directory and Entra Specialist Purpose of the Role The Active Directory / Entra Specialist is the technical authority for the customer's hybrid identity platform. The role owns the design, operation, security, and continuous improvement of on-premises Active Directory Domain Services, Group Policy, ADFS, Entra ID (P2), Azure AD Connect, B2B and B2C flows, Conditional Access, MFA, Intune, and identity lifecycle automation across all in-scope business programmes. Identity is the foundation of every other workload in the estate. This role therefore underwrites the availability, security and compliance of M365, SharePoint, Power Platform, Dynamics 365, Fabric and Azure services. The post-holder is on the front line for any P1 authentication outage, Conditional Access misconfiguration, or directory replication failure. Requirements Key Technical Responsibilities Hybrid Active Directory Operations Administer multi-forest on-premises Active Directory Domain Services (modern schema, WS2016+ functional level), including domain controllers, FSMO roles, sites and services, replication topology, DNS, DHCP, time service (NT5DS), and trust relationships. Maintain and harden Group Policy Objects across the estate, including baseline security GPOs, audit policies, AppLocker / WDAC, BitLocker, Windows Update for Business, and computer/user configuration drift detection. Operate and patch ADFS on legacy Windows Server (where present), administer claims rules, relying party trusts, certificate rotation, and plan migration of relying parties to Entra ID where commercially appropriate. Manage Azure AD Connect (auto-updating) including sync rules, source anchor, password hash sync / pass-through authentication, seamless SSO, staging mode validation, and re-permission / re-baseline activities. Diagnose and remediate replication failures, lingering objects, USN rollback, tombstone issues, NTLM/Kerberos auth failures, SPN duplication, and time-skew problems using repadmin, dcdiag, klist, KDCDiag, ADReplStatus and Microsoft 365 Connectivity Analyzer. Entra ID and Identity Lifecycle Administer Entra ID P2 tenants including users, groups, dynamic groups, administrative units, application registrations, enterprise applications, service principals, managed identities, and consent workflows. Configure and operate Conditional Access (sign-in risk, user risk, named locations, device compliance, session controls), Multi-Factor Authentication, passwordless sign-in (Windows Hello for Business, FIDO2, Authenticator), and Temporary Access Pass for onboarding. Operate Privileged Identity Management (PIM) for just-in-time role activation, approval workflows, access reviews and break-glass account governance; work with the on-premises PAM solution for tier-0 administration. Manage Entra ID B2B (guest collaboration) and B2C (custom policies, user flows, identity providers, custom branding, application integrations) for both internal and external-facing tenants. Implement Identity Governance: Entitlement Management, Access Packages, Access Reviews, Lifecycle Workflows, and HR-driven inbound provisioning where in scope. Endpoint Management with Intune Administer Microsoft Intune including device enrolment (Autopilot, Apple ABM, Android Enterprise), configuration profiles, compliance policies, app protection policies (MAM), Conditional Access integration, and Endpoint Privilege Management. Define and maintain Windows update rings, feature update profiles, driver update profiles, and Defender for Endpoint baselines via Intune Security Baselines. Operate Win32 / LOB / Microsoft Store app deployment, package authoring (intunewin), update rings, and supersedence chains. Co-manage devices with Configuration Manager where present, troubleshoot enrolment failures using IME logs, MDM Diagnostics Tool, and the Intune Troubleshooting portal. Identity Automation and Tooling Author and maintain PowerShell automation using Microsoft Graph PowerShell SDK, Az PowerShell, ExchangeOnlineManagement, MSOnline (legacy), AzureAD (legacy), and ActiveDirectory modules - including JML (Joiner-Mover-Leaver) workflows, group membership reconciliation, stale object cleanup, and licence assignment. Build and operate identity-related runbooks in Azure Automation, Logic Apps, or Power Automate where appropriate. Use Microsoft Graph (REST + SDK) for advanced reporting, bulk operations, and integration with HR / ITSM platforms. Service Operations Own L2/L3 incident, problem and change resolution for identity-related tickets, achieving the contractual SLAs: P1 1-hour response / 4-hour resolution, P2 4-hour response / 1 working day resolution, P3 1 working day response / 3 working days resolution. Lead root cause analysis (RCA) for P1 identity incidents and produce post-incident review reports within five working days. Contribute to monthly service reports with identity KPIs (sign-in success rate, MFA coverage, Conditional Access policy hits, privileged role activations, sync health, AAD Connect latency, certificate expiry watchlist). Participate in CAB review, change scheduling, and change risk assessment for identity changes; produce rollback plans and pre/post implementation checks. Mandatory Technical Skills Active Directory Domain Services on Windows Server 2016+ including schema management, sites and services, GPO design, ADFS, AD CS, AD Recycle Bin, and DR/recovery procedures (authoritative restore). Entra ID P2 deep configuration: Conditional Access, MFA, PIM, Identity Protection (sign-in risk, user risk, risky users), Identity Governance, Application Proxy, External Identities (B2B, B2C custom policies), and Hybrid Identity (AAD Connect). Microsoft Intune end-to-end device and application management, including Autopilot pre-provisioning, compliance, configuration, and Endpoint Security baselines. PowerShell scripting (intermediate-to-advanced) using Microsoft Graph SDK, Az, and ActiveDirectory modules; ability to read / debug / extend existing scripts under change control. Working knowledge of Microsoft Defender for Identity (formerly Azure ATP) signals and integration with Defender XDR. Networking fundamentals: DNS, Kerberos, NTLM, OAuth 2.0, OpenID Connect, SAML 2.0, WS-Federation, certificate-based authentication, TLS/SSL troubleshooting, and modern auth flows. Working knowledge of ITIL v4 incident, problem, change and configuration management, and ITSM ticketing (e.g., ServiceNow, Jira Service Management). Desirable Technical Skills Entra Permissions Management (CIEM). Microsoft Entra ID Verified ID (decentralised identity) familiarity. Group Policy Analytics in Intune for cloud migration. Experience operating tier-0 PAM solutions (CyberArk, BeyondTrust, Delinea) on-premises. Familiarity with FIDO2 hardware tokens, Windows LAPS (cloud), and Authentication Methods migration. Exposure to Azure VPN Gateway, ExpressRoute, and hybrid connectivity for identity authentication paths. Required Certifications Microsoft Certified: Identity and Access Administrator Associate (SC-300) - mandatory. Microsoft 365 Certified: Administrator Expert (MS-102) - preferred. Microsoft Certified: Cybersecurity Architect Expert (SC-100) - desirable.
