Wintel AD Engineer - Secure - On-site Hampshire (Active Directory)

Location: Farnborough, Hampshire, United Kingdom; on-site attendance required 5 days a week. Candidates must have the right to work in the United Kingdom and meet applicable UK Government and contractual personnel security and residency requirements; some roles may require specific nationality eligibility.

Company

hirify.global provides managed IT services and supports customer Windows and identity environments.

What you will do

• Provide Level 3 operational support for Windows Server and Microsoft Active Directory in managed customer environments.
• Plan and maintain domain controller capacity, FSMO distribution, AD sites and services, trusts, replication topology, DNS, DHCP, certificate dependencies and Group Policy.
• Build, configure, patch and harden physical and virtual Windows AD servers against CIS or equivalent baselines.
• Automate provisioning, health checks, replication monitoring and bulk reporting with PowerShell.
• Investigate authentication, Kerberos/NTLM, replication, GPO and DNS incidents; manage problem investigations, major-incident updates and permanent fixes.
• Maintain CMDB records, topology diagrams, runbooks, audit evidence and customer communications while coordinating with Security, Identity, Network and Change Management teams.

Requirements

• 4–7 years of hands-on enterprise managed-services experience administering Windows Server 2016, 2019, 2022 and 2025 across physical and virtual platforms, including installation, configuration, patching and hardening.
• Strong on-premises Active Directory expertise covering domain controllers, FSMO roles, intra- and inter-site replication, sites and services, OU design, trusts, architecture and infrastructure dependencies.
• Advanced Group Policy design, implementation, linking, troubleshooting and security enforcement across complex OUs and multiple sites.
• Solid AD-integrated DNS and DHCP knowledge, including forward and reverse lookup zones, conditional forwarders and DHCP scopes.
• Experience enforcing CIS or equivalent Windows Server security baselines, managing privileged access, cleaning stale objects, reviewing group hygiene and supporting security assessments.
• Practical JML provisioning, role-change and de-provisioning experience, with knowledge of least-privilege and role-based access.
• Working knowledge of VMware vSphere and/or Hyper-V deployment, management and troubleshooting.
• Ability to develop, maintain and troubleshoot PowerShell scripts for AD automation, health checks, reporting and bulk operations.
• Ability to apply ITIL 4 Incident, Problem, Change and Configuration Management practices; diagnose issues with evidence, native Windows tools and monitoring platforms; and maintain accurate CMDB records, diagrams, runbooks, SOPs and audit artefacts.

Nice to have

• Microsoft Windows Server Hybrid Administrator Associate, Identity and Access Administrator Associate, or equivalent vendor certification.
• ITIL 4 Foundation certification or higher.
• Microsoft AD CS experience, including templates, enrolment, renewal dependencies and domain-services integration.
• Exposure to hybrid identity, Azure AD Connect, single sign-on and conditional access.
• Experience with Veeam, Commvault or similar tools for AD and system-state recovery, including authoritative and non-authoritative restores.
• Experience forecasting domain-controller resources, storage and replication bandwidth.
• Familiarity with SCOM, SolarWinds, Dynatrace or similar monitoring platforms.
• Awareness of ISO 27001, Cyber Essentials and NIST requirements affecting AD security and audits.
• Existing or obtainable UK DV clearance is advantageous for defence-sector work.

Culture & Benefits

• Work model prioritizes in-person collaboration while offering flexibility for wellbeing, productivity, individual work styles and life circumstances.
• Inclusive environment focused on strong connections and community.
• Employment is full time and requires on-site attendance five days per week.