Microsoft Active Directory Engineer

Contract Type: FTC 6 months

Salary: £45,000 - £55,000

Workplace: ITV London White City. Expectation is 1-2 days in the office.

Closing Date: 21st September 2025

The role / team

ITV is the biggest commercial television network in the UK. Behind every famous face, there are hundreds of others, all doing their bit to make things happen. We love telly, we’re passionate about content and most importantly we understand our audiences. As a growing international company, we’re commercially minded and have a global focus. We’re all about pushing the boundaries and being innovative.

Workplace Technology is a pivotal department within ITV, they provide us with all the tools to do our jobs efficiently and successfully. The department is forever innovating to ensure that ITV employees have the best systems and tools available. We are seeking an experienced Engineer to join this innovative team.

The role will require you to work collaboratively with other Workplace Technology teams and the Head of Workplace Technology to promote core technologies, share learnings and support the delivery of the Workplace Technology strategy and roadmap items.

Responsibilities:

• Administration and maintenance of Identity services including on prem Microsoft Active Directory and Microsoft Entra ID
• Assist the identification, analysis, and resolution of system design weaknesses
• Troubleshoot and manage the resolution of issues related to identities, systems, access, accounts, authentication, authorisation, entitlements, and permissions
• Troubleshoot, support and resolve system incidents, problems and changes, as required
• Determine and recommend the most appropriate response to complex problems, issues and/or defects by assessing impact and prioritisation
• Ensure the maintenance, patching, operating, and monitoring of IAM systems are in place and completed
• Work closely with operational teams, Cyber Security and Application Owners on both operational management and roadmap development of all Identity services
• Provide technical expertise and works with the business to drive process improvements through automation
• Identification of strategic opportunities for improvement and optimisation of Identity Management based on industry trends, best practices and business needs
• Create and maintain comprehensive documentation for AD configurations, processes, and procedures.
• Participate in projects related to Microsoft upgrades, migrations, consolidations, and new technology implementations

Key criteria:

• Bachelor degree in Computer Science, or equivalent technical discipline or demonstrable experience in 2nd line Active Directory support
• Microsoft Active Directory Certification (required)
• Microsoft Entra ID/Azure AD Certification (desirable)
• CyberArk Qualifications (desirable)
• Okta Certification (any level desirable)

Other things we’re looking for (key criteria):

Substantial technical understanding of Active Directory and associated components, including, but not limited to:-

• Security Groups
• Group Policy Object Configuration
• DNS
• DHCP
• Trusts and federations
• Promoting and demoting domain controllers
• Domain controller upgrades
• Domain and Forest Functional Level Changes
• Replication troubleshooting
• Sites and Services Configuration
• Access control list modifications
• AD Authentication Policies

• Experience with Entra ID (Azure AD)
• Understanding of SSL Certificates and their permutations
• PowerShell
• Awareness of Active Directory best security practices
• Privileged Access Management experience is desirable