Active Directory Specialist

Role: Active Directory (AD) Specialist

Location: Ipswich (3 days in Office)

The Active Directory (AD) Specialist is responsible for designing, building, and maintaining Privileged Access Workstations (PAWs) for both on-premises and cloud environments, ensuring seamless integration with Multi-Factor Authentication (MFA) solutions.

Key Responsibilities:

• Plan, deploy, and harden PAWs used exclusively for privileged administrative tasks in both on-premises and cloud (Azure, IaaS) environments.

• Build and maintain organizational unit (OU) structures, security groups, and Group Policy Objects (GPOs) to support secure PAW management.

• Ensure PAWs operate in strict isolation from standard workstations (e.g., no web browsing, email, or unauthorized software).

• Administer, support, and troubleshoot Active Directory infrastructure (on-premises and cloud/hybrid environments).

• Integrate on-premises AD with Azure AD and participate in domain migrations, consolidations, and hybrid identity solutions.

• Implement strict access controls, security hardening, and network isolation for PAWs, including disabling unnecessary services and restricting network connectivity to only management networks.

• Configure AD and cloud conditional access policies to enforce that privileged administrative tasks are performed only from PAWs, with mandatory MFA.

• Develop and maintain automation scripts (e.g., PowerShell, Python) for provisioning, securing, and maintaining PAWs, and for AD administrative tasks.

• Refactor and integrate custom scripts, tools, and APIs into the environment as needed.

Essential Requirements:

• Proven experience with Active Directory (on-premises and Azure AD), including integration, troubleshooting, and security hardening.

• Strong knowledge of PAW concepts, and hands-on experience deploying or managing PAWs in enterprise settings.

• Experience integrating MFA and conditional access solutions in both on-prem and cloud environments.

• Proficient with automation and scripting tools (e.g., PowerShell, Python).

• Deep familiarity with privileged access management (PAM) concepts, tools, and best practices.

• Demonstrated ability to enforce security policies, monitor/audit privileged access, and respond to incidents.

• Excellent analytical, documentation, and communication skills.

Preferred Qualifications:

• Experience with privileged access management (PAM) solutions like CyberArk or similar.

• Familiarity with virtualization and isolation technologies as they relate to PAW deployment.

• Understanding of compliance frameworks and security standards relevant to identity and privileged access.

• Experience with MFA technologies such as Ping

Wipro is an exciting organization to work for. We ranked as a “Top Employer” as part of the Top Employer Institute annual listings. We were assessed on several key HR practices including Diversity and Inclusion. This is accompanied by exciting business growth in the last six-quarters.

Benefits: You will receive a competitive salary, a generous benefits package, training, and development, as well as an exciting career within a fast paced and dynamic business. The benefits include;

Contributory pension

Extra holiday purchase

Life insurance policy

Private medical insurance

Equal Opportunities: Wipro is an advocate for positive change and conscious inclusion. As a global employer, we strive to create a diverse Wipro family by remaining committed to the development of our culture, diversity, equality, and inclusion in the workplace. All applicants are welcome.