Active Directory Architect

Job Overview We are seeking a highly skilled Active Directory Architect to lead the design, development and optimisation of directory services. In this strategic role you will shape the future state architecture of complex AD environments. Defining standards, best practice and ensuring our infrastructure remains robust, scalable and compliant. The role will be responsible for the strategic design, governance and continual improvement of MBDAs directory services, defining and maintaining the AD architectural roadmap, and overseeing complex multi-domain and multi-forest environments. What We Offer You Be part of a unique, well-respected team of dedicated people recognized within our company for professionalism, dedication and flexibility. Opportunity to work nationally and internationally, broadening horizons through the rich cultural diversity of our company. Participate in a values-led culture committed to investing in workforce with a personal development programme. Employees receive 25 days of paid annual leave per calendar year, plus all statutory and public holidays. After 5, 10, and 15 years of service an additional day of annual leave is added at each milestone. Option to purchase up to five additional days of holiday through payroll. Flexible Dynamic Working policies allowing choice of hours and location. Defined Contribution retirement savings plan: 4% employee contributions, 6% employer contributions, up to 2% increase. Free financial webinars, financial education website, share incentive plan, mortgage advice, season ticket loan, critical illness benefit, employee assistance programme, voluntary private medical insurance, funded private medical insurance (for Grade C & above), dental insurance, healthcare cash plan, healthcare and leisure benefits. Healthworks gym membership on-site, annual gym membership with discounted rates at over 3,600 UK gym chains. Club activities such as theatre trips, days out, sporting activities. Company bonus up to 21% of salary. Pension with up to 14% total contribution. Enhanced parental leave available up to 26 weeks for maternity, adoption and shared parental leave, with additional paternity, neonatal leave and fertility treatment enhancements. Facilities include subsidised meals, free car parking. Training and development opportunities and financial support for further study. Discounts & vouchers platform, Costco membership, technology vouchers up to £2,500, charity donation tax relief, MyCar scheme, holiday purchase options. Qualifications Expert knowledge of Active Directory Domain Services, Group Policy, DNS, DHCP, Replication, and Trusts. Deep understanding of Azure AD / Entra ID, ADFS, Hybrid Join and identity federation models. Strong background in Kerberos, LDAP, NTLM, and PKI-based authentication (smartcards, certificates). Experience architecting bastion forests and Just-In-Time / Just-Enough Administration (JIT/JEA). Familiarity with PowerShell, Ansible and automation frameworks for provisioning and compliance. Integration knowledge across Microsoft Exchange, M365, VMware and enterprise IT ecosystems. Understanding of Zero Trust architecture, identity threat detection, and SIEM integration. Strong stakeholder management, influencing, and communication skills. Ability to translate complex technical challenges into executive-level decisions and investment cases. Responsibilities Lead the design, development, and optimisation of directory services across multiple domains and forests. Define standards and best practices, govern ongoing improvement of AD solutions, maintain the architectural roadmap, oversee multi-domain/multi-forest environments, collaborate with stakeholders to translate technical challenges into executive-level decisions, and drive zero trust identity implementation. Work Environment & Security Clearance Dynamic working: 1-2 days per week on-site as required. Security clearance: British citizen required; DV clearance required. Participants will undergo HMG Basic Personnel Security Standard checks (BPSS) managed by the MBDA Personnel Security Team. #J-18808-Ljbffr