Senior Active Directory Specialist

Job Description

We are currently recruiting for a Senior Active Directory Specialist to be a part of our Active Directory Support Team! We are a smart working organisation and can be flexible with location, however, some travel may be required once the pandemic is over.The Active Directory (AD) Team plays a key role in providing specialist support for Avivas UK, Ireland, Canada and Investors international markets. Aviva is a complex environment with multiple domains and the AD Team are central to maintaining service while delivering improvements and simplification.We are seeking your global enterprise experience to provide technical direction and oversight supporting our BAU functions and project deliveries. As the Senior Active Directory Specialist, you will also ensure that active directory and our wider end user services are continually enhanced, security posture is optimised while balancing service availability, user experience and the needs of the business. You will also be involved with solution design, change oversight and delivery as well as more complex incident resolution.Responsibilities of the role:Review designs from projects/architecture to ensure they align with service strategy and security requirementsResponsible for technical governance for the team, ensuring activities are completed in line with service strategyActive contribution in the Global Active Directory Governance BoardOversight of key 3rd party suppliers, to ensure smooth operations, both procedurally and strategicallyDefine ongoing operational activities improvements and approaches to ensure the services remain healthy, secure and performantOversight of proactive improvement activity such as object remediation, GPO tuning and other remedial activityReview DNS requests/changes Define service roadmaps to ensure services are future proofed and able to meet the changing needs of the businessDefine CIS L-1 standards and working with key 3rd party suppliers to ensure consistently applied across the Active Directory estateConduct vulnerability scanning for Active Directory environment via utilisation of industry-standard toolsets (PingCastle, Bloodhound etc.) to ensure hardening activity is consistently deliveredTechnical governance and review of active directory architecture (Trusts, Sites and Services, DFS, etc.)Own the technical risks associated with the active directory service, developing appropriate strategies to mitigateSkills and experience were looking for:In-depth knowledge of Active Directory services in a global enterprise environment (Trusts, Sites & Services, DFS, etc.)Familiarity with vulnerability scanning tooling such as Bloodhound and PingCastle (or equivalent)Ability to engage stakeholders in planning, progress, and risk reporting processesExperience with applying insights, experience, and assurance techniques to BAU, projects, and plansExcellent stakeholder management and being able to distil complex technical requirements into a format which can be easily understoodExcellent working knowledge of MMC, PowerShell, Win10, networking topology and conceptsUnderstand Azure active directory, demonstrated through appropriate certificationExposure to the principles of Systems ThinkingAppropriate MCSA/MCSE certificationGood understanding of the ITIL framework, demonstrated through appropriate certification What will you get for this role Salary between £55,000 - £60,000 depending on skills, experience and qualificationsGenerous defined contribution pension schemeAnnual performance related bonus and pay reviewHoliday allowance of 29 days plus bank holidays and the option to buy/sell up to 5 additional daysUp to 40% discount for some Aviva products through "My Aviva Extras" plus discounts for Friends and Family (some exclusions apply)Excellent range of flexible benefits to include a matching share save schemeWorking at AvivaAt Aviva, were people with a purpose. To be with you today, for a better tomorrow.We bring this to life by ensuring managing risk is at the heart of the way we all work. We love people who do the right thing for our customers, and our colleagues. We want people who speak up, who take ownership, and who make good decisions.The way we do this is important too, were all about our people - thats you - so we can be pretty flexible. If you want to work from home some of the time or change your hours so you can pick up your kids or care for someone in your family, were very open to that. In fact, we dont advertise roles as either part or full time, because we know each person has different needs, just as each business area has different needs. So, its up to you to discuss working hours during your interview.We care deeply about being inclusive and that means we encourage applications from people with diverse backgrounds and experiences. We want our employees to bring their whole self to work and that starts with you.We interview every disabled applicant* that meets the minimum criteria for the job. Once youve applied, please send us a separate email stating that you have a disclosed disability and well make sure we interview you.Wed love it if you could submit your application online. If you require an alternative method of applying, please give Lacey Lane a call on or send an email to *As defined in The Equality Act 2010*. By minimum criteria we mean you should provide us with evidence which demonstrates that you generally meet the level of competence required and have the qualifications, skills or experience defined as essential to perform the role.