AD Security Remediation SME

AD Security Remediation SME
12 Month contract initially + Extensions
Based: Hybrid - Reading. Max 2 days p/w onsite
Rate -£350 - £450 p/d via Umbrella

We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a AD Security Remediation SME on a long term program of work.

The role provides exposure to complex, multi-domain Active Directory environments and the opportunity to work with cutting-edge Microsoft identity and security technologies, including:
* Active Directory Security Hardening and Remediation
* Active Directory Certificate Services (AD CS)
* Microsoft Identity & Access Management solutions
* Group Managed Service Accounts (gMSA)
* Privileged Access Management (PAM)
* Kerberos Authentication & Delegation Controls
* Enterprise Security Governance and Risk Management
* Large-scale Production Change and Transformation Programmes

Key Responsibilities:
* Lead Active Directory security remediation activities across complex enterprise environments.
* Perform administration and governance of Active Directory at Domain Admin and Enterprise Admin levels.
* Assess, prioritize, and remediate identity-related security vulnerabilities, misconfigurations, and privilege escalation risks.
* Review and harden Active Directory Certificate Services (AD CS), authentication, and delegation configurations.
* Manage privileged access controls, administrative groups, service accounts, and permissions governance.
* Coordinate remediation activities across infrastructure, security, server, database, and application support teams.
* Plan, implement, and govern production changes while ensuring minimal business disruption and effective risk management.
* Produce remediation documentation, validation evidence, and executive-level progress reporting.
* Collaborate with security architects, project managers, and customer stakeholders to drive remediation outcomes.
* Support continuous improvement initiatives to strengthen identity security, compliance, and cyber resilience.

Key Skills & Experience:
* Strong hands-on experience administering and securing Active Directory in large enterprise environments.
* Proven expertise in Active Directory security remediation, hardening, and privilege reduction initiatives.
* Deep knowledge of Active Directory Certificate Services (AD CS) and certificate-based authentication security.
* Strong understanding of Kerberos authentication, delegation models, SPNs, and service account security.
* Experience reviewing and remediating AD permissions, ACLs, privileged groups, and administrative access paths.
* Knowledge of Microsoft Identity & Access Management, Privileged Access Management (PAM), and least-privilege principles.
* Experience managing security remediation programmes within production environments, including change and risk management.
* Ability to coordinate activities across infrastructure, security, application, database, and support teams.
* Strong analytical, troubleshooting, and root-cause investigation skills for complex identity and security issues.
* Excellent stakeholder management, communication, and documentation skills with experience working directly with customers and senior leadership.

Desirable skills/knowledge/experience:
* Microsoft Entra ID (Azure AD) and hybrid identity management experience.
* Experience with CyberArk, Beyond Trust, Delinea or other Privileged Access Management (PAM) platforms.
* Exposure to Microsoft Defender for Identity and identity threat detection solutions.
* Experience implementing Tiered Administration, ESAE/Red Forest, or other privileged access security models.
* Knowledge of CIS, Microsoft Security Baselines, and industry best practices for Active Directory security.
* Familiarity with vulnerability assessment tools such as PingCastle, BloodHound, Purple Knight, or similar AD security assessment platforms.
* Experience supporting large-scale security transformation or remediation programmes in global enterprise environments.
* Knowledge of SQL Server security, authentication, and privileged access governance.
* Relevant certifications such as Microsoft Certified: Identity and Access Administrator, Security Operations Analyst, CISSP, CISM, or equivalent.
* Experience working within regulated environments with strong governance, audit, and compliance requirements.

This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible.

LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.

A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.