Identity Infrastructure Engineer

Identity Infrastructure Engineer

Rate: £447 per day (inside IR35)

Location: Inverness or Manchester

Working arrangement: Based within secure facilities - 5 days onsite

Contract length: To confirm

Security clearance: BPSSYour new company

You will be joining an organisation operating within a secure and highly regulated environment, supporting critical Identity and Access Management (IDAM) services. Working closely with security, engineering and IDAM teams, you will help maintain the resilience, availability and security of core identity infrastructure platforms.

Your new role

As a Senior Identity Infrastructure Engineer, you will be responsible for the administration, support, security and continuous improvement of the organisation's identity infrastructure estate. This role focuses on Active Directory, PKI, DNS, Group Policy and authentication services, while also providing L2/L3 operational support across wider identity platforms.

Key responsibilities

Active Directory Infrastructure

Administer and maintain enterprise Active Directory forests, domains and domain controllers.

Manage Active Directory Sites and Services, replication topology, trusts and directory infrastructure.

Maintain AD-integrated DNS and authentication services.

Design, implement and support Group Policy architecture.

Support Active Directory backup, recovery, disaster recovery and business continuity processes.

Monitor platform health, security, performance and replication.

Participate in Active Directory upgrades, migrations and infrastructure improvement programmes.

Implement security hardening standards and privileged access controls.Public Key Infrastructure (PKI)

Administer Microsoft Active Directory Certificate Services (AD CS).

Manage Certificate Authorities, templates, enrolment processes and certificate lifecycle management.

Support Offline Root CA and Issuing CA environments.

Maintain CRL, AIA and certificate distribution services.

Monitor renewals, revocations, compliance and certificate expiry.

Maintain PKI documentation, recovery procedures and security standards.

Troubleshoot cryptographic and certificate-related issues.Identity Infrastructure & Authentication Services

Support Microsoft Entra Connect and hybrid identity services.

Maintain LDAP, LDAPS, Kerberos and NTLM authentication platforms.

Support integrations across Active Directory, MIM, Entra ID, Okta and BeyondTrust.

Resolve authen...