Senior Active Directory Engineer/Architect

Role Title: Senior Active Directory Engineer/Architect

Salary: £80,000 - £100,000 (depending on experience)
Location: Remote (UK-based with some UK/US timezone overlap)

The Client:
Our client is a highly regarded Microsoft consultancy specialising in enterprise-scale migration, modernisation, and identity security projects.
They help global organisations simplify and unify complex IT environments, delivering seamless transitions across Active Directory, Entra ID (Azure AD), Microsoft 365, and hybrid infrastructures. Known for their no-nonsense approach, they plan and execute every engagement around the client's business needs, ensuring minimal disruption and maximum value.

The Candidate:
You're an experienced Senior Active Directory Engineer or Architect with deep technical expertise and a consultative mindset.
You thrive in projects that balance hands-on technical delivery with high-level design and advisory work. You're confident leading enterprise migrations, securing and modernising complex AD estates, and communicating with clients at both technical and executive levels. Excellent communication skills are essential, along with the ability to work independently in a remote, multi-project consulting environment.

The Role:
This is a senior, client-facing role that will take ownership of Active Directory and Entra ID projects across enterprise customers.
You'll lead design, architecture, and delivery efforts for AD modernisation, security hardening, and migration engagements, often part of larger M&A or transformation programmes. The position offers full remote flexibility, autonomy, and an opportunity to make a real impact shaping the direction of future projects as the business continues to grow. You'll work closely with other senior consultants and directors, often leading your own engagements with support from project management. Depending on timing, you may take over an active project or lead a new one from inception.

Responsibilities:

• Lead assessments, design, and delivery of enterprise Active Directory and Entra ID solutions.
• Deliver a mix of AD-to-AD, AD-to-Entra ID, and cloud-only transformations.
• Architect secure, compliant, and modern identity platforms aligned to Microsoft best practices.
• Create and maintain technical deliverables - design documents, blueprints, migration runbooks, and remediation plans.
• Engage directly with clients, providing expert guidance on AD modernisation and security improvements.
• Operate with autonomy while maintaining clear communication with the wider delivery team and leadership.

Requirements:

• Significant experience designing, securing, and managing Microsoft Active Directory at enterprise scale.
• Proven track record in multi-forest/domain migrations, domain collapses, and greenfield builds.
• Solid understanding of supporting services: DNS/DHCP, Certificate Services, RADIUS/NPS, Group Policy.
• Strong knowledge of AD security models, Microsoft tiering, LAPS, PAWs, and privileged access controls.
• Experience integrating AD with Entra ID (Azure AD) and designing hybrid identity architectures.
• Excellent written and spoken English communication skills.
• Ability to work remotely with minimal supervision, managing multiple projects effectively.

Desirable:

• Familiarity with Entra Connect Sync, Intune, and passwordless authentication (FIDO2, Windows Hello for Business).
• Experience with Okta or other enterprise IdPs (Ping, SailPoint, etc.).
• Hands-on experience with Sentinel, Defender for Identity, or equivalent identity monitoring tools.
• Knowledge of AD replication, forest decommissioning, and Windows Server 2025.

To apply for this Senior Active Directory Engineer/Architect permanent job, please click the button below and submit your latest CV.

Curo Services endeavours to respond to all applications, however this may not always be possible during periods of high volume. Thank you for your patience.

Curo Services is a trading name of Curo Resourcing Ltd and acts as an Employment Business for contract and temporary recruitment as well as an Employment Agency in relation to permanent vacancies.