Active Directory and Identity Architect

Contract: Active Directory & Identity Architect

Please read the information in this job post thoroughly to understand exactly what is expected of potential candidates.
Start: ASAP, subject to background checks
Duration: 6 months
Location: Remote with occasional UK travel
Rate: £600-£650 per day, Inside IR35 (umbrella)
Reference: 20889
The Role
Seeking an experienced Active Directory & Identity Architect for a 6-month contract focused on assessing and redesigning authentication and access controls for a business-critical IP Address Management (IPAM) environment.
You'll lead discovery, design a secure and resilient AD-based access model, and support implementation and migration into production.
Key Responsibilities
Assess existing IPAM access across applications, APIs, databases and service accounts.
Design centralised AD authentication, role-based access and group structures.
Define Privileged Access Management (PAM) and least-privilege controls.
Design secure break-glass and recovery access procedures.
Develop a phased migration plan covering testing, resilience, cutover and rollback.
Produce architecture documentation, audit controls and operational handover.
Essential Skills
Strong enterprise Active Directory architecture , including multi-domain/forest design and tiered administration.
Experience with IPAM platforms and application authentication integration.
Proven expertise in PAM, RBAC and privileged access controls .
Authentication protocols: LDAP/LDAPS, Kerberos and SAML/SSO .
Service account, API access and emergency recovery design.
Strong technical discovery, stakeholder engagement and architecture documentation.
Desirable: Experience in regulated environments, infrastructure management and operational resilience. xwzovoh
Networking People (UK) is acting as an Employment Business in relation to this vacancy.