Senior Wintel/Active Directory Engineer/SC Cleared/Hybrid

We are recruiting two Senior Wintel/Active Directory Engineers to support a large enterprise infrastructure environment within a global engineering organisation.

We are seeking experienced, hands-on engineers with strong third-line troubleshooting skills across Active Directory, Windows infrastructure and hybrid identity services. You will resolve complex incidents, maintain business-critical services and contribute to technical changes and operational improvements.

Key responsibilities

• Provide third-line support across Wintel, Active Directory and hybrid identity services.

• Troubleshoot AD replication, Group Policy, DNS, DHCP, authentication and access issues.

• Support Microsoft Entra ID and directory synchronisation across on-premises and cloud environments.

• Resolve escalated incidents and contribute to major incident investigations.

• Perform directory health checks and implement security and service improvements.

• Support technical changes, service integration and project implementation.

• Use PowerShell for administration, troubleshooting and reporting.

• Maintain technical documentation and follow ITIL incident, problem and change management processes.

Essential skills and experience

• Extensive third-line Wintel and Active Directory support experience within large enterprise environments.

• Strong hands-on knowledge of AD administration, replication, Group Policy, DNS and DHCP.

• Broad Windows Server knowledge across Legacy and modern environments.

• Experience troubleshooting authentication, authorisation and access control.

• Microsoft Entra ID/Azure AD and hybrid identity experience.

• Familiarity with VMware and/or Hyper-V.

• Working knowledge of PowerShell.

• Strong communication skills and the ability to take ownership of complex technical issues.

• SC security clearance.

Desirable skills

• Enterprise Microsoft PKI and certificate services.

• Entra Connect/Azure AD Connect, ADFS, SSO and MFA.

• Conditional Access, RBAC and Privileged Identity Management.

• PowerShell Scripting and automation.

• Active Directory migrations, domain consolidation and infrastructure security improvements.

• Experience supporting engineering, manufacturing or secure enterprise environments.

Location: Derby, with Bristol potentially available
Working arrangement: Flexible hybrid - no fixed office pattern, with 1-2 days per week on-site at most
Rate: £550 per day
Duration: Initial 6 months
Start date: ASAP
Positions: 2
Hours: Standard business hours
Security clearance: SC required