Identity Infrastructure Engineer - 3 months Contract - £500/day via umbrella company - onsite Manchester/Inverness - SCC FLEX CONTRACT
We are seeking an experienced Identity Infrastructure Engineer to support, maintain, and continuously improve the core identity infrastructure platforms that underpin the organisation's Identity and Access Management (IAM) services. This role is responsible for ensuring the availability, security, resilience, and performance of critical identity technologies, including Microsoft Active Directory, Public Key Infrastructure (PKI), DNS, Group Policy, and enterprise authentication services.
Working as part of a wider IAM and security function, the successful candidate will provide L2/L3 operational support, troubleshoot complex identity-related issues, and contribute to the delivery of secure, scalable, and modern identity solutions. The role requires strong technical expertise across enterprise Microsoft technologies, hybrid identity environments, automation, and security best practices, while collaborating closely with infrastructure, security, and engineering teams.
Your responsibilities as an Identity Infrastructure Engineer:
- Administer, maintain, and support enterprise Active Directory environments, including forests, domains, domain controllers, replication, trusts, DNS, and Group Policy.
- Manage and optimise Active Directory health, performance, security, backup, recovery, and disaster recovery processes.
- Implement and maintain Active Directory security controls, privileged access models, and security hardening standards.
- Administer and support Microsoft Active Directory Certificate Services (AD CS) and wider PKI infrastructure.
- Manage Certificate Authorities, certificate templates, certificate lifecycle processes, CRL, AIA, enrolment services, and certificate compliance activities.
- Support enterprise authentication services including LDAP, LDAPS, Kerberos, and NTLM.
- Maintain and support hybrid identity solutions, including Microsoft Entra ID and Entra Connect/Cloud Sync.
- Support integrations between Active Directory and identity platforms such as Microsoft Identity Manager (MIM), Okta, and BeyondTrust.
- Provide L2/L3 support for identity-related incidents, service requests, authentication failures, and directory service issues.
- Investigate root causes of identity infrastructure problems and implement permanent resolutions and service improvements.
- Develop and maintain PowerShell automation to improve operational efficiency and reduce manual effort.
- Contribute to infrastructure modernisation, vulnerability remediation, security enhancement initiatives, and continuous service improvement programmes.
- Produce and maintain technical documentation, support runbooks, operational procedures, and recovery documentation.
- Collaborate with security, infrastructure, and IAM teams to ensure identity services remain secure, compliant, and highly available.
As a suitable Identity Infrastructure Engineer, you will have:
- Strong experience administering and supporting Microsoft Active Directory, including AD DS, DNS, Group Policy, LDAP/LDAPS, Kerberos, trusts, and replication.
- Proven experience troubleshooting complex authentication, directory services, and identity-related issues.
- Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) and enterprise PKI environments.
- Experience managing Certificate Authorities, certificate templates, certificate lifecycle processes, CRL, and AIA infrastructure.
- Strong knowledge of Windows Server 2016, 2019, and 2022 administration.
- Proficiency in PowerShell Scripting and automation.
- Experience implementing security hardening, privileged access controls, and disaster recovery processes.
- Working knowledge of Microsoft Entra ID, Entra Connect, MIM, Okta, and BeyondTrust.
- Good understanding of Identity and Access Management (IAM), including identity lifecycle management, authentication, authorisation, and RBAC.
- Experience supporting enterprise-scale identity services within secure or highly regulated environments.
If you are a results-driven Identity Infrastructure Engineer with a passion for your work, we want to hear from you. Immediate start. References required.