Associate Consultant (Microsoft Identity & Access) (FTC)

Posted 11 hours 36 minutes ago by Applicable

Permanent
Full Time
Other
Gloucestershire, Bristol, United Kingdom, BS153
Job Description
Associate Consultant (Identity & Access) (FTC)

Remote with occasional travel to customer sites and our Bristol HQ

Working hours: Monday to Friday (37.5 hours per week)

Provisional Start Date: May 2026

About Us

At Applicable, we specialise in delivering seamless Microsoft 365 and Unified Communications solutions to enterprise clients. As we continue to grow, we're looking for a junior Consultant to join our growing consultancy team on a fixed term basis to support the delivery of Active Directory and Microsoft identity services across a wide range of customer environments.

The Role

In this role, you'll work as part of a structured delivery team, supporting real world customer projects under the guidance of experienced consultants. You'll be hands on in planning, implementing, validating, and supporting Active Directory migration and restructure activities, helping ensure projects are delivered to a high standard and customers experience minimal disruption during change.

What You'll Do

You'll take ownership of defined delivery activities across identity and access engagements, contributing directly to successful outcomes. Typical work will include supporting Active Directory migrations and restructures such as forest/domain migrations, consolidations or separations, OU/GPO redesign, domain controller modernisation, identity object clean up, and coexistence/cutover activities.

You'll contribute to target state design and hands on build activities, helping configure core Active Directory components (including domain controllers, Sites & Services, replication, and baseline configuration), implementing OU structures and Group Policy baselines, and supporting delegated administration models that enable secure and manageable operations.

You'll support migration execution through well run pilots and waves, improving and following runbooks and checklists, completing validation steps and capturing evidence, and troubleshooting authentication, policy, and directory issues during pilots and cutovers. You'll also work with adjacent teams on dependencies such as DNS, certificate services, network services, endpoint/domain join processes, and directory synchronisation to Microsoft Entra ID (Azure AD) where applicable.

Throughout delivery, you'll maintain clear technical documentation (design inputs, build notes, as built records, validation evidence) and support knowledge transfer to BAU teams, including early life support / hypercare where required.

What We're Looking For

You'll already have hands on delivery experience supporting Active Directory migrations and restructures and be comfortable working in customer environments. You'll be methodical, delivery focused, and able to work independently on assigned tasks while collaborating closely with the wider delivery team.

Strong communication skills are essential, as you'll work with stakeholders across infrastructure, security, service desk and application teams, and you'll be expected to document your work clearly and accurately.

  • Hands on delivery experience supporting Active Directory migrations and restructures (domain moves, forest migrations, consolidations, or separations).
  • Deep technical Active Directory expertise, including forest/domain build, trusts, DNS, Sites & Services, replication, domain controller operations, and identity/authentication troubleshooting.
  • Hands on experience using Active Directory migration tooling (e.g., Quest) to support staged migrations, coexistence, reporting, and validation.
  • Strong OU, Group Policy, and delegated administration skills, including baseline hardening and troubleshooting policy application.
  • Experience with identity object clean up and remediation (users, groups, service accounts), including resolving conflicts/collisions and improving data quality.
  • Strong operational approach, able to follow and improve runbooks, execute repeatable steps, capture validation evidence, and support controlled cutovers.
  • Understanding of directory synchronisation concepts to Microsoft Entra ID (Azure AD) (e.g., Entra Connect/AAD Connect), including object scoping and common sync issues during transitions.
  • Experience supporting an AD privileged access model (separate admin accounts, tiering, delegation patterns) and hardening controls.
  • Experience with endpoint/device migration impacts (domain join strategy, profile migration considerations, MDM integration) during identity changes.
  • Experience producing operational handover artefacts and supporting hypercare models post cutover.
Why Join Us?

Supportive team culture with a focus on learning and development.

Exposure to enterprise-level deployments and cutting edge technologies.

Great employee benefits which include:

  • Company pension
  • Income Protection
  • Health Cash Plan
  • Death in Service (4 x salary)
  • Training & Development